SQL Injection Vulnerability in Code-Projects Vehicle Management System
CVE-2024-9087

9.8CRITICAL

Key Information:

Vendor: Code-projects
Status: Vehicle Management
Vendor: CVE Published:; 22 September 2024

🔔 Create Code-projects Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2024-9087?

A critical SQL injection vulnerability exists within the Code-Projects Vehicle Management system, specifically in the /edit1.php file. This vulnerability is triggered by improper handling of the 'sno' argument, allowing an attacker to execute arbitrary SQL queries against the database remotely. The exposure of this flaw could lead to unauthorized access to sensitive data, manipulation of the database, and significant breaches of security. Users of the affected version, Vehicle Management 1.0, should seek immediate remediation to mitigate potential risks associated with this vulnerability. The exploit has been publicly disclosed, raising concerns about its potential exploitation by malicious actors.

Affected Version(s)

Vehicle Management 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2024-9087 - Proof of Concept