Vulnerability CVE-2024-9894


Published: 2024-10-12

Description:
A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file reset.php. The manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Type:

CWE-89

(Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))

 References:
https://vuldb.com/?id.280164
https://vuldb.com/?ctiid.280164
https://vuldb.com/?submit.422189
https://github.com/siyuancn-hub/cve/blob/main/sql7-.md
https://code-projects.org/

Copyright 2024, cxsecurity.com

 

Back to Top