Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-33957

SQL injection in Janobe E-Negosyo System

Description

SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'id' in '/admin/orders/controller.php' parameter

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Janobe E-Negosyo System

Default version status: unaffected

  • 1.0affected

References