Unknown · Code-Projects Farmacia · CVE-2024-11244
**Name of the Vulnerable Software and Affected Versions**
code-projects Farmacia version 1.0
**Description**
A critical issue was found in the file /editar-cliente.php, where the manipulation of the `id` argument leads to SQL injection. This issue can be initiated remotely.
**Recommendations**
For code-projects Farmacia version 1.0, as a temporary workaround, consider validating and sanitizing the `id` argument in the /editar-cliente.php file to prevent SQL injection attacks. Restrict access to the /editar-cliente.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.