CVE-2024-7641

CWE-89SQL Injection3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 83.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedAug 12

Description

A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected is an unknown function of the file deactivate_act.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

🔴Vulnerability Details

2
GHSA
GHSA-vpqx-74j2-c23c: A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management System 12024-08-12
CVEList
SourceCodester Kortex Lite Advocate Office Management System deactivate_act.php sql injection2024-08-09
CVE-2024-7641 (MEDIUM CVSS 5.3) | A vulnerability | cvebase.io