CVE-2024-27746

Name of the Vulnerable Software and Affected Versions Petrol Pump Mangement Software version 1.0

Description The issue allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the "index.php" component. This enables the attacker to inject malicious SQL code, potentially leading to unauthorized access or data manipulation.

Recommendations For Petrol Pump Mangement Software version 1.0, consider restricting access to the "index.php" component to minimize the risk of exploitation. As a temporary workaround, avoid using the email address parameter in the affected component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.