Description
A vulnerability, which was classified as critical, was found in code-projects Farmacia 1.0. This affects an unknown part of the file /visualizar-produto.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Farmacia | 1.0 |
| code-projects | farmacia | 1.0 |
References
- https://code-projects.org/Product
- https://github.com/LamentXU123/cve/blob/main/cve-l.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.286491Permissions Required
- https://vuldb.com/?id.286491Third Party Advisory
- https://vuldb.com/?submit.454715Third Party Advisory
Timeline
- Published
- Dec 1, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed