Security Advisory

CVE-2024-55509

9.8
CRITICAL

Vulnerability Description

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component.
Published Date December 20, 2024
Official Source NIST NVD Advisory