CVE-2024-1928 — SQL Injection in Web-based Student Clearance System

CWE-89 — SQL Injection3 documents3 sources
Severity
7.2HIGHNVD
CNA4.7
EPSS
0.1%
top 78.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Web-based Student Clearance SystemWalterjnr1 Web-based Student Clearance System
Timeline
PublishedFeb 29

Description

A vulnerability, which was classified as critical, has been found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-admin.php of the component Edit User Profile Page. The manipulation of the argument Fullname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254864.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-cgw8-vc23-hffg: A vulnerability, which was classified as critical, has been found in SourceCodester Web-Based Student Clearance System 1↗2024-02-29
▶
CVEList
SourceCodester Web-Based Student Clearance System Edit User Profile Page edit-admin.php sql injection↗2024-02-27
▶
CVE-2024-1928 — SQL Injection | cvebase