PT-2024-38257 · Unknown · Code-Projects Online Bus Reservation Site

·

CVE-2024-7311

·

Published

2024-07-31

·

Updated

2024-08-13

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions code-projects Online Bus Reservation Site version 1.0
Description A critical issue affects the processing of the file register.php, where the manipulation of the Email argument leads to sql injection. The attack can be initiated remotely.
Recommendations For code-projects Online Bus Reservation Site version 1.0, consider restricting access to the register.php file until a patch is available. As a temporary workaround, avoid using the Email argument in the affected file to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-7311

Affected Products

Code-Projects Online Bus Reservation Site