CVE-2024-3002

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in code-projects Online Book System 1.0. Affected is an unknown function of the file /description.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258204.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Mar 27, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-300208.1Windows Cryptographic Services Remote Code Execution Vulnerability CVE-2024-300216.8Windows Mobile Broadband Driver Remote Code Execution Vulnerability CVE-2024-300227.5Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2024-300237.5Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2024-300247.5Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2024-300257.8Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2024-300277.8NTFS Elevation of Privilege Vulnerability CVE-2024-300287.8Win32k Elevation of Privilege Vulnerability CVE-2024-300297.5Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2024-30039.8A vulnerability has been found in code-projects Online Book System 1.0 and classified as critical. Affected by this vulnerability is an unkn CVE-2024-300307.8Win32k Elevation of Privilege Vulnerability CVE-2024-300317.8Windows CNG Key Isolation Service Elevation of Privilege Vulnerability