critical9.8Public exploit code
CVE-2024-24495
SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Daily Habit Tracker 1.0 - SQL Injection2024-04-02 · webapps · php
Impact
SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Remyandrade | Daily Habit Tracker | Version 1.0 |