CVE-2024-3252: falha de média gravidade em SourceCodester Internship Portal Management…
SourceCodester Internship Portal Management System check_admin.php sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.3epss 0.8%
A vulnerability classified as critical has been found in SourceCodester Internship Portal Management System 1.0. This affects an unknown part of the file admin/check_admin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259101 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
SourceCodester · Internship Portal Management SystemCVEs relacionadas — SourceCodester Internship Portal Management…
No mesmo produto, das mais perigosas para as menos.
CVE-2024-3259MEDIUMSourceCodester Internship Portal Management System delete_activity.php sql injectionEPSS 0.8%CVE-2024-3255MEDIUMSourceCodester Internship Portal Management System edit_admin_query.php sql injectionEPSS 0.8%CVE-2024-3258MEDIUMSourceCodester Internship Portal Management System add_activity.php sql injectionEPSS 0.7%CVE-2024-3257MEDIUMSourceCodester Internship Portal Management System edit_activity_query.php sql injectionEPSS 0.7%CVE-2024-3256MEDIUMSourceCodester Internship Portal Management System edit_activity.php sql injectionEPSS 0.7%CVE-2024-3254MEDIUMSourceCodester Internship Portal Management System edit_admin.php sql injectionEPSS 0.7%