code-projects Online Faculty Clearance HTTP POST Request deactivate.php sql injection
CVE-2024-0461
9.8CRITICAL
Key Information:
- Vendor
code-projects
- Status
- Vendor
- CVE Published:
- 12 January 2024
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2024-0461?
A significant vulnerability exists in the Online Faculty Clearance 1.0 application, specifically within the HTTP POST Request Handler's deactivate.php file. By manipulating the 'haydi' argument, an attacker can execute SQL injection attacks remotely. This vulnerability poses a serious risk as it allows unauthorized access to the database, potentially leading to data leakage or compromise. Security measures and patches should be prioritized to mitigate this risk and protect sensitive information.
Affected Version(s)
Online Faculty Clearance 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.