SQL Injection Vulnerability in Code-Projects Mobile Shop Login Page

CVE-2024-2927

What is CVE-2024-2927?

A critical SQL injection vulnerability has been identified in the Login Page component of Code-Projects Mobile Shop version 1.0. This vulnerability is triggered through improper validation of input parameters within the Details.php file, specifically affecting the 'id' argument. Attackers can exploit this flaw remotely, allowing them to execute arbitrary SQL queries and potentially manipulate or extract sensitive data from the underlying database. This vulnerability poses a significant risk to the integrity and confidentiality of user data, and its public disclosure means that attackers may actively seek to exploit it in the wild. Organizations using this software are strongly encouraged to apply security patches and implement necessary mitigations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References