SQL Injection Vulnerability in 1000 Projects Beauty Parlour Management System
CVE-2024-12234
Key Information:
- Vendor
1000 Projects
- Vendor
- CVE Published:
- 5 December 2024
Badges
What is CVE-2024-12234?
CVE-2024-12234 pertains to a critical SQL injection vulnerability found in the 1000 Projects Beauty Parlour Management System version 1.0. This vulnerability is located within the /admin/edit-customer-detailed.php file, where manipulation of the 'name' argument can allow attackers to execute arbitrary SQL queries. As a result, the vulnerability may be exploited remotely, potentially compromising sensitive customer data and system integrity. Public disclosure of this exploit has raised significant concerns regarding the security of the affected product, highlighting the urgent need for remediation and safeguarding against possible attacks.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Beauty Parlour Management System 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V3.1
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved