CVE-2024-3617: medium-severity vulnerability in SourceCodester Kortex Lite Advocate Office…
SourceCodester Kortex Lite Advocate Office Management System deactivate_case.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.7epss 0.7%
A vulnerability, which was classified as critical, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This issue affects some unknown processing of the file /control/deactivate_case.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260273 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected products
SourceCodester · Kortex Lite Advocate Office Management SystemRelated CVEs — SourceCodester Kortex Lite Advocate Office…
In the same product, most dangerous first.
CVE-2024-7642MEDIUMSourceCodester Kortex Lite Advocate Office Management System activate_act.php sql injectionEPSS 1.0%CVE-2024-7640MEDIUMSourceCodester Kortex Lite Advocate Office Management System delete_register.php sql injectionEPSS 1.0%CVE-2024-7639MEDIUMSourceCodester Kortex Lite Advocate Office Management System delete_act.php sql injectionEPSS 1.0%CVE-2024-7638MEDIUMSourceCodester Kortex Lite Advocate Office Management System delete_client.php sql injectionEPSS 1.0%CVE-2024-7641MEDIUMSourceCodester Kortex Lite Advocate Office Management System deactivate_act.php sql injectionEPSS 0.9%CVE-2024-3618MEDIUMSourceCodester Kortex Lite Advocate Office Management System activate_case.php sql injectionEPSS 0.7%