CodeAstro Real Estate Management System Vulnerability Could Lead to SQL Injection

CVE-2024-11058

What is CVE-2024-11058?

A SQL injection vulnerability has been identified in the CodeAstro Real Estate Management System, particularly affecting the /aboutedit.php file within the About Us Page component. This vulnerability can be exploited through manipulation of the 'id' argument, allowing remote attackers to execute arbitrary SQL queries on the underlying database. The exploit's availability in public domains heightens the risk as it provides potential attackers with the means to leverage this flaw to access sensitive information or unwarrantedly alter database entries, posing a significant security risk for users and organizations relying on this software.

References