← CVE Intelligence

CVE-2024-12938

code-projects Simple Admin Panel updateOrderStatus.php sql injection PUBLISHED

Description (CNA)

A vulnerability has been found in code-projects Simple Admin Panel 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file updateOrderStatus.php. The manipulation of the argument record leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected (CNA)

Vendor / productVersions
code-projects / Simple Admin Panelaffected 1.0

CWE

CWE-89, CWE-74

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.