SQL Injection Vulnerability in Code-Projects Crud Operation System
CVE-2024-9011
9.8CRITICAL
Summary
A significant security vulnerability exists within the Code-Projects Crud Operation System version 1.0, specifically in the 'updata.php' file. This vulnerability allows for SQL injection attacks due to improper handling of the 'sid' argument. By manipulating this argument, attackers can execute unauthorized SQL commands, potentially leading to unauthorized data access or manipulation. The flaw can be exploited remotely, posing a substantial risk to systems utilizing this software. With the vulnerability publicly disclosed, it is crucial for users to implement necessary security measures to protect their applications from potential exploitation.
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published