From 04cd814c9dbd5e2f9ea86fd6bc1a9c25919b7fd8 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 25 Dec 2024 21:32:28 +0000
Subject: [PATCH] Publish GHSA-5c4f-26hw-7622

---
 .../GHSA-5c4f-26hw-7622.json                  | 52 +++++++++++++++++++
 1 file changed, 52 insertions(+)
 create mode 100644 advisories/unreviewed/2024/12/GHSA-5c4f-26hw-7622/GHSA-5c4f-26hw-7622.json

diff --git a/advisories/unreviewed/2024/12/GHSA-5c4f-26hw-7622/GHSA-5c4f-26hw-7622.json b/advisories/unreviewed/2024/12/GHSA-5c4f-26hw-7622/GHSA-5c4f-26hw-7622.json
new file mode 100644
index 00000000000..2c4ea4c0c93
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-5c4f-26hw-7622/GHSA-5c4f-26hw-7622.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5c4f-26hw-7622",
+  "modified": "2024-12-25T21:30:43Z",
+  "published": "2024-12-25T21:30:43Z",
+  "aliases": [
+    "CVE-2024-12926"
+  ],
+  "details": "A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12926"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/dawatermelon/CVE/blob/main/CodeZips%20Project%20Management%20System/README.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.289279"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.289279"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.467933"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-25T20:15:22Z"
+  }
+}
\ No newline at end of file