CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_order_items.php?id= .
References
Link | Resource |
---|---|
https://github.com/Chencihai/Chencihai/blob/main/cve/supplier-management-system/SQLi-1.md | Exploit Third Party Advisory |
https://github.com/Chencihai/Chencihai/blob/main/cve/supplier-management-system/SQLi-1.md | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 09:32
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/Chencihai/Chencihai/blob/main/cve/supplier-management-system/SQLi-1.md - Exploit, Third Party Advisory |
26 Jul 2024, 13:22
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/Chencihai/Chencihai/blob/main/cve/supplier-management-system/SQLi-1.md - Exploit, Third Party Advisory | |
First Time |
Campcodes supplier Management System
Campcodes |
|
CWE | CWE-89 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
Summary |
|
|
CPE | cpe:2.3:a:campcodes:supplier_management_system:1.0:*:*:*:*:*:*:* |
24 Jul 2024, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-07-24 20:15
Updated : 2024-11-21 09:32
NVD link : CVE-2024-41551
Mitre link : CVE-2024-41551
CVE.ORG link : CVE-2024-41551
JSON object : View
Products Affected
campcodes
- supplier_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')