CVE-2024-11998

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in code-projects Farmacia 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /visualizer-forneccedor.chp. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
code-projects	Farmacia	1.0
codeprojects	farmacia	1.0

References

https://code-projects.org/Product
https://github.com/jaychou8023/cve/blob/main/sql1.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.286414Permissions Required
https://vuldb.com/?id.286414Third Party Advisory
https://vuldb.com/?submit.453706Third Party Advisory

Timeline

Published: Nov 30, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-119998.8CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authentica CVE-2024-12006.5A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. Affected by this issue is some unknown functionality of the file CVE-2024-120005.4A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects some unknown processi CVE-2024-120015.4A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is an unknown function of the file /co CVE-2024-120026.5A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability CVE-2024-120036.1The WP System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to m CVE-2024-120046.1The WPC Order Notes for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1 CVE-2024-120056.1The WP-BibTeX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to m CVE-2024-120065.3The W3 Total Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several func CVE-2024-120079.8A vulnerability, which was classified as critical, was found in code-projects Farmacia 1.0. This affects an unknown part of the file /visual CVE-2024-120087.5The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the public CVE-2024-120097.2A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and e