code-projects Pharmacy Management System 1.0 manage_supplier.php?action=search text SQL Injection
Wuro vulnerability wey an yi classify sey kura an gano shi a cikin code-projects Pharmacy Management System 1.0. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, /php/manage_supplier.php?action=search na cikin fayil, $software_component na cikin sashi. Ngam manipulation of the argument text shi SQL Injection. CWE shidin ka a yi bayani matsala sai ya kai CWE-89. Gaskiya, laifi an fitar da shi 10/16/2024. Advisory ɗin ana rabawa don saukewa a gist.github.com. Wannan rauni ana sayar da shi da suna CVE-2024-10022. Ngam yiɗi ka a tuma ndiyam ka nder internet. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a gist.github.com. Kama 0-day, an ndiyam a wuro be $0-$5k. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
1 Goyarwa · 56 Datenpunkte
| Furɗe | Súgá 10/16/2024 08:10 |
|---|---|
| software_vendor | code-projects |
| software_name | Pharmacy Management System |
| software_version | 1.0 |
| software_file | /php/manage_supplier.php?action=search |
| software_argument | text |
| vulnerability_cwe | CWE-89 (SQL Injection) |
| vulnerability_risk | 2 |
| cvss3_vuldb_av | N |
| cvss3_vuldb_ac | L |
| cvss3_vuldb_ui | N |
| cvss3_vuldb_s | U |
| cvss3_vuldb_c | L |
| cvss3_vuldb_i | L |
| cvss3_vuldb_a | L |
| cvss3_vuldb_e | P |
| cvss3_vuldb_rc | R |
| advisory_url | https://gist.github.com/higordiego/2bd0a94e480906a60ce83b8a4ec26957 |
| exploit_availability | 1 |
| exploit_publicity | 1 |
| exploit_url | https://gist.github.com/higordiego/2bd0a94e480906a60ce83b8a4ec26957 |
| source_cve | CVE-2024-10022 |
| cna_responsible | VulDB |
| software_type | Project Management Software |
| cvss2_vuldb_av | N |
| cvss2_vuldb_ac | L |
| cvss2_vuldb_ci | P |
| cvss2_vuldb_ii | P |
| cvss2_vuldb_ai | P |
| cvss2_vuldb_e | POC |
| cvss2_vuldb_rc | UR |
| cvss4_vuldb_av | N |
| cvss4_vuldb_ac | L |
| cvss4_vuldb_ui | N |
| cvss4_vuldb_vc | L |
| cvss4_vuldb_vi | L |
| cvss4_vuldb_va | L |
| cvss4_vuldb_e | P |
| cvss2_vuldb_au | S |
| cvss2_vuldb_rl | ND |
| cvss3_vuldb_pr | L |
| cvss3_vuldb_rl | X |
| cvss4_vuldb_at | N |
| cvss4_vuldb_pr | L |
| cvss4_vuldb_sc | N |
| cvss4_vuldb_si | N |
| cvss4_vuldb_sa | N |
| cvss2_vuldb_basescore | 6.5 |
| cvss2_vuldb_tempscore | 5.6 |
| cvss3_vuldb_basescore | 6.3 |
| cvss3_vuldb_tempscore | 5.7 |
| cvss3_meta_basescore | 6.3 |
| cvss3_meta_tempscore | 5.7 |
| cvss4_vuldb_bscore | 5.3 |
| cvss4_vuldb_btscore | 2.1 |
| advisory_date | 1729029600 (10/16/2024) |
| price_0day | $0-$5k |