CVE-2024-0182: SourceCodester Engineers Online Portal Admin Login sql injection

Published Jan 1, 2024

Updated

A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ of the component Admin Login. The manipulation of the argument username/password leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-249440.

Affected Software

1 affected component

Janobe Engineers Online Portal=1.0

Event History

Jan 1, 2024

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-0182?

CVE-2024-0182 has been classified as a critical vulnerability.

How do I fix CVE-2024-0182?

To fix CVE-2024-0182, upgrade SourceCodester Engineers Online Portal to the latest version that patches the SQL injection issue.

What components are affected by CVE-2024-0182?

CVE-2024-0182 affects the Admin Login component of the SourceCodester Engineers Online Portal version 1.0.

What type of vulnerability is CVE-2024-0182?

CVE-2024-0182 is a SQL injection vulnerability.

What actions can an attacker perform with CVE-2024-0182?

An attacker can exploit CVE-2024-0182 to manipulate the username/password arguments for unauthorized access to the application.