CVE-2024-5048

A vulnerability classified as critical was found in code-projects Budget Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument edit leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264745 was assigned to this vulnerability.
Configurations

Configuration 1 (hide)

cpe:2.3:a:code-projects:budget_management:1.0:*:*:*:*:*:*:*

History

03 Mar 2025, 16:25

Type Values Removed Values Added
CPE cpe:2.3:a:code-projects:budget_management:1.0:*:*:*:*:*:*:*
First Time Code-projects
Code-projects budget Management
References () https://github.com/BurakSevben/CVEs/blob/main/Budget%20Management%20App/Budget%20Management%20App%20-%20SQL%20Injection%20-%201.md - () https://github.com/BurakSevben/CVEs/blob/main/Budget%20Management%20App/Budget%20Management%20App%20-%20SQL%20Injection%20-%201.md - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.264745 - () https://vuldb.com/?ctiid.264745 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.264745 - () https://vuldb.com/?id.264745 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.335666 - () https://vuldb.com/?submit.335666 - Third Party Advisory, VDB Entry

21 Nov 2024, 09:46

Type Values Removed Values Added
References () https://github.com/BurakSevben/CVEs/blob/main/Budget%20Management%20App/Budget%20Management%20App%20-%20SQL%20Injection%20-%201.md - () https://github.com/BurakSevben/CVEs/blob/main/Budget%20Management%20App/Budget%20Management%20App%20-%20SQL%20Injection%20-%201.md -
References () https://vuldb.com/?ctiid.264745 - () https://vuldb.com/?ctiid.264745 -
References () https://vuldb.com/?id.264745 - () https://vuldb.com/?id.264745 -
References () https://vuldb.com/?submit.335666 - () https://vuldb.com/?submit.335666 -

04 Jun 2024, 19:20

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad fue encontrada en code-projects Budget Management 1.0 y clasificada como crítica. Una función desconocida del archivo /index.php es afectada por esta vulnerabilidad. La manipulación del argumento edit conduce a la inyección de SQL. El ataque se puede lanzar de forma remota. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-264745.

17 May 2024, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-17 14:15

Updated : 2025-03-03 16:25


NVD link : CVE-2024-5048

Mitre link : CVE-2024-5048

CVE.ORG link : CVE-2024-5048


JSON object : View

Products Affected

code-projects

  • budget_management
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')