CVE-2024-10427: medium-severity vulnerability in Codezips Pet Shop Management System
Codezips Pet Shop Management System deleteanimal.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.5%
A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /deleteanimal.php. The manipulation of the argument t1 leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions the parameter "refno" to be affected. But further inspection indicates that the name of the affected parameter is "t1".
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
Codezips · Pet Shop Management SystemRelated CVEs — Codezips Pet Shop Management System
In the same product, most dangerous first.
CVE-2024-10561MEDIUMCodezips Pet Shop Management System birdsupdate.php sql injectionEPSS 0.9%CVE-2024-10556MEDIUMCodezips Pet Shop Management System birdsadd.php sql injectionEPSS 0.7%CVE-2024-10431MEDIUMCodezips Pet Shop Management System deletebird.php sql injectionEPSS 0.7%CVE-2024-10430MEDIUMCodezips Pet Shop Management System animalsupdate.php sql injectionEPSS 0.7%CVE-2024-10752MEDIUMCodezips Pet Shop Management System productsadd.php sql injectionEPSS 0.6%CVE-2024-10426MEDIUMCodezips Pet Shop Management System animalsadd.php sql injectionEPSS 0.6%