CVE-2024-7279mediumCWE-89

CVE-2024-7279: falha de média gravidade em SourceCodester Lot Reservation Management System

SourceCodester Lot Reservation Management System sql injection

Publicada em

Seguir esta CVE+ Monitorar Lot Reservation Management System

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.7%
A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273148.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
SourceCodester · Lot Reservation Management System
CVEs relacionadas — SourceCodester Lot Reservation Management System

No mesmo produto, das mais perigosas para as menos.

CVE-2024-7222MEDIUMSourceCodester Lot Reservation Management System home.php sql injectionEPSS 0.6%CVE-2024-7282MEDIUMSourceCodester Lot Reservation Management System manage_model.php sql injectionEPSS 0.6%CVE-2024-7281MEDIUMSourceCodester Lot Reservation Management System sql injectionEPSS 0.6%CVE-2024-7280MEDIUMSourceCodester Lot Reservation Management System view_reserved.php sql injectionEPSS 0.6%CVE-2024-7283MEDIUMSourceCodester Lot Reservation Management System manage_user.php sql injectionEPSS 0.6%CVE-2024-7223MEDIUMSourceCodester Lot Reservation Management System view_model.php sql injectionEPSS 0.5%