CVE-2024-10425: SQL Injection in Project Worlds Student Project Allocation System

Key Information 1. Vulnerability ID: - VDB-281966 - CVE-2024-10425 2. Vulnerability Name: - Project Worlds Student Project Allocation System 1.0 Project Selection Page Move Up Project PHP Up SQL Injection 3. CVSS Meta Temp Score: - 6.0 4. Current Vulnerability Price: - $0-$5k 5. CTI Interest Score: - 3.19 6. Affected Component: - Project Selection Page 7. Affected File: - /student/project_selection/move_up_project.php 8. Vulnerability Description: - Due to unknown processing, the Project Selection Page component in the file /student/project_selection/move_up_project.php is vulnerable to SQL injection. The issue is declared under CWE-89, which may lead to SQL injection. 9. Impact: - Affects the confidentiality, integrity, and availability of Project Worlds Student Project Allocation System 1.0. 10. Vulnerability Disclosure: - The vulnerability has been publicly disclosed and may be exploited. 11. Vulnerability Remediation: - Assigned CVE ID: CVE-2024-10425. - The exploitation of this vulnerability is marked by MITRE ATT&CK as T1505. 12. Exploit Availability: - Exploits for this vulnerability are available on GitHub. - The vulnerability is marked as easy to exploit. 13. Search Suggestion: - Use the search query to identify potential vulnerable targets. 14. Recommendation: - Replace the affected component. Related Links VDB-281964 VDB-281965 Copyright Information © 1997-2024 vuldb.com - cc by-nc-sa

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-10425: SQL Injection in Project Worlds Student Project Allocation System