CVE-2024-3259: falha de média gravidade em SourceCodester Internship Portal Management…
SourceCodester Internship Portal Management System delete_activity.php sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.3epss 0.8%
A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/delete_activity.php. The manipulation of the argument activity_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259108.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
SourceCodester · Internship Portal Management SystemCVEs relacionadas — SourceCodester Internship Portal Management…
No mesmo produto, das mais perigosas para as menos.
CVE-2024-3252MEDIUMSourceCodester Internship Portal Management System check_admin.php sql injectionEPSS 0.8%CVE-2024-3255MEDIUMSourceCodester Internship Portal Management System edit_admin_query.php sql injectionEPSS 0.8%CVE-2024-3258MEDIUMSourceCodester Internship Portal Management System add_activity.php sql injectionEPSS 0.7%CVE-2024-3257MEDIUMSourceCodester Internship Portal Management System edit_activity_query.php sql injectionEPSS 0.7%CVE-2024-3256MEDIUMSourceCodester Internship Portal Management System edit_activity.php sql injectionEPSS 0.7%CVE-2024-3254MEDIUMSourceCodester Internship Portal Management System edit_admin.php sql injectionEPSS 0.7%