CVE-2024-3314

CWE-89 — SQL InjectionCWE-22 — Path TraversalCWE-275 documents5 sources
Severity
9.8CRITICAL
EPSS
0.2%
top 64.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Computer Laboratory Management SystemOretnom23 Computer Laboratory Management System
Timeline
PublishedApr 4
Latest updateAug 19

Description

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Users.php. The manipulation leads to sql injection. The attack may be initiated remotely. The identifier VDB-259385 was assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages2 packages

🔴Vulnerability Details

3
GHSA
GHSA-cq4r-22pw-4cc7: A vulnerability was found in SourceCodester Computer Laboratory Management System 1↗2024-04-04
▶
CVEList
SourceCodester Computer Laboratory Management System Users.php sql injection↗2024-04-04
▶
GHSA
Arbitrary file read vulnerability in Git server Plugin can lead to RCE↗2024-01-24
▶

📋Vendor Advisories

1
CISA
Jenkins Command Line Interface (CLI) Path Traversal Vulnerability↗2024-08-19
▶
CVE-2024-3314 (CRITICAL CVSS 9.8) | A vulnerability was found in Source | cvebase.io