CVE-2024-9976

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/manage_customer.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Oct 15, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-99774.7A vulnerability, which was classified as critical, was found in MitraStar GPT-2541GNAC BR_g5.6_1.11(WVK.0)b26. Affected is an unknown functi CVE-2024-99785.5in OpenHarmony v4.1.1 and prior versions allow a local attacker cause information leak through out-of-bounds Read.CVE-2024-99795.3A flaw was found in PyO3. This vulnerability causes a use-after-free issue, potentially leading to memory corruption or crashes via unsound CVE-2024-99808.8The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to inj CVE-2024-99818.8The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to upl CVE-2024-99829.8AIM LINE Marketing Platform from Esi Technology does not properly validate a specific query parameter. When the LINE Campaign Module is enab CVE-2024-99837.5Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remote attackers to expl CVE-2024-99849.8Enterprise Cloud Database from Ragic does not authenticate access to specific functionality, allowing unauthenticated remote attackers to us CVE-2024-99859.8Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a we CVE-2024-99869.8A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown CVE-2024-99878.8A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agents_modules_csv functionality. This issu CVE-2024-99889.8The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.19. This is due to missing valida