CVE-2024-7281: fallo de gravedad media en SourceCodester Lot Reservation Management System
SourceCodester Lot Reservation Management System sql injection
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3epss 0.6%
A vulnerability classified as critical has been found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the file /admin/index.php?page=manage_lot. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-273150 is the identifier assigned to this vulnerability.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
SourceCodester · Lot Reservation Management SystemCVEs relacionadas — SourceCodester Lot Reservation Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-7279MEDIUMSourceCodester Lot Reservation Management System sql injectionEPSS 0.7%CVE-2024-7222MEDIUMSourceCodester Lot Reservation Management System home.php sql injectionEPSS 0.6%CVE-2024-7282MEDIUMSourceCodester Lot Reservation Management System manage_model.php sql injectionEPSS 0.6%CVE-2024-7280MEDIUMSourceCodester Lot Reservation Management System view_reserved.php sql injectionEPSS 0.6%CVE-2024-7283MEDIUMSourceCodester Lot Reservation Management System manage_user.php sql injectionEPSS 0.6%CVE-2024-7223MEDIUMSourceCodester Lot Reservation Management System view_model.php sql injectionEPSS 0.5%