mirror of
https://github.com/0xMarcio/cve.git
synced 2025-11-28 18:48:49 +00:00
18 lines
908 B
Markdown
18 lines
908 B
Markdown
|
|
### [CVE-2024-10140](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10140)
|
||
|
|

|
||
|
|

|
||
|
|

|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. Affected by this issue is some unknown functionality of the file /manage_supplier.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
- https://gist.github.com/higordiego/b03bc3a330374a0581e51891d6105ed2
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
- https://github.com/holypryx/CVE-2024-10140
|
||
|
|
|