critical9.8

CVE-2024-48580

SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the lo…

Impact

SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the login request.

Affected products

Vendor	Product	Affected versions
Mayurik	Best Courier Management System	Version 1.0

Weakness classification

CWE-89

References

NVD record
CVE.org record
https://github.com/baineoli/CVE/blob/main/2024/courier%20management%20system%20-%20SQL%20Injection%20%28Admin%20Login%29.md