CVE-2024-3131 — SQL Injection in Computer Laboratory Management System

CWE-89 — SQL Injection4 documents4 sources
Severity
6.5MEDIUMNVD
CNA6.3
EPSS
0.0%
top 86.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Computer Laboratory Management SystemOretnom23 Computer Laboratory Management System
Timeline
PublishedApr 1
Latest updateMay 19

Description

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=save_category. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-258874 is the identifier assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
SourceCodester Computer Laboratory Management System sql injection↗2024-04-01
▶
GHSA
GHSA-2vjj-2c9x-r9mp: A vulnerability was found in SourceCodester Computer Laboratory Management System 1↗2024-04-01
▶

📋Vendor Advisories

1
Red Hat
kernel: gro: fix ownership transfer↗2024-05-19
▶
CVE-2024-3131 — SQL Injection | cvebase