CVE-2024-8347

CWE-89 — SQL Injection3 documents3 sources

Severity

5.3MEDIUM

EPSS

0.2%

top 54.83%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sourcecodester Computer Laboratory Management System Oretnom23 Computer Laboratory Management System

Timeline

PublishedAug 30

Latest updateAug 31

Description

A vulnerability classified as critical was found in SourceCodester Computer Laboratory Management System 1.0. Affected by this vulnerability is the function delete_record of the file /classes/Master.php?f=delete_record. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5sourcecodester/computer_laboratory_management_system1.0

▶NVDoretnom23/computer_laboratory_management_system1.0

🔴Vulnerability Details

GHSA

GHSA-qq6c-5c4q-rj7p: A vulnerability classified as critical was found in SourceCodester Computer Laboratory Management System 1↗2024-08-31

▶

CVEList

SourceCodester Computer Laboratory Management System Master.php delete_record sql injection↗2024-08-30

▶