CVE-2024-10165: medium-severity vulnerability in Codezips Sales Management System
Codezips Sales Management System deletecustcom.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.7%
A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file deletecustcom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
Codezips · Sales Management SystemRelated CVEs — Codezips Sales Management System
In the same product, most dangerous first.
CVE-2024-10369MEDIUMCodezips Sales Management System addcustcom.php sql injectionEPSS 0.8%CVE-2024-10370MEDIUMCodezips Sales Management System addcustind.php sql injectionEPSS 0.7%CVE-2024-10368MEDIUMCodezips Sales Management System addstock.php sql injectionEPSS 0.7%CVE-2024-10166MEDIUMCodezips Sales Management System checkuser.php sql injectionEPSS 0.7%CVE-2024-10167MEDIUMCodezips Sales Management System deletecustind.php sql injectionEPSS 0.6%