A vulnerability was found in code-projects Supply Chain Management 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/edit_manufacturer.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.278826 | Third Party Advisory |
| https://vuldb.com/?ctiid.278826 | Permissions Required |
| https://vuldb.com/?submit.413337 | Third Party Advisory |
| https://github.com/mengcehn/CVE/edit/main/Supply-Chain-Management-in-php-sql.md | Permissions Required |
| https://code-projects.org/ | Product |
Configurations
History
02 Oct 2024, 13:32
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Anisha
Anisha supply Chain Management |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:anisha:supply_chain_management:1.0:*:*:*:*:*:*:* | |
| References | () https://github.com/mengcehn/CVE/edit/main/Supply-Chain-Management-in-php-sql.md - Permissions Required | |
| References | () https://code-projects.org/ - Product | |
| References | () https://vuldb.com/?submit.413337 - Third Party Advisory | |
| References | () https://vuldb.com/?id.278826 - Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.278826 - Permissions Required |
29 Sep 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-09-29 03:15
Updated : 2024-10-02 13:32
NVD link : CVE-2024-9322
Mitre link : CVE-2024-9322
JSON object : View
Products Affected
anisha
- supply_chain_management
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')