CVE-2024-3001

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in code-projects Online Book System 1.0. This issue affects some unknown processing of the file /Product.php. The manipulation of the argument value leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258203.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Mar 27, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-300108.8Windows Hyper-V Remote Code Execution VulnerabilityCVE-2024-300116.5Windows Hyper-V Denial of Service VulnerabilityCVE-2024-300126.8Windows Mobile Broadband Driver Remote Code Execution VulnerabilityCVE-2024-300138.8Windows MultiPoint Services Remote Code Execution VulnerabilityCVE-2024-300147.5Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-300157.5Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-300165.5Windows Cryptographic Services Information Disclosure VulnerabilityCVE-2024-300178.8Windows Hyper-V Remote Code Execution VulnerabilityCVE-2024-300187.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2024-300196.5DHCP Server Service Denial of Service VulnerabilityCVE-2024-30029.8A vulnerability, which was classified as critical, was found in code-projects Online Book System 1.0. Affected is an unknown function of theCVE-2024-300208.1Windows Cryptographic Services Remote Code Execution Vulnerability
CVE-2024-3001: Critical severity, CVSS 9.8 | Vulnix