CVE-2024-2528

CVE-2024-2528 affects MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0, with a SQL injection in the /admin/update-rooms.php file caused by unsafely handling the room_id parameter. Remote exploitation is possible; exploit information has been disclosed publicly. Affected impact and CVSS...

CVE-2024-2528 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php sql injection

A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/update-rooms.php. The manipulation of the argument roomid leads to sql injection. It is possible to initiate the attack...