CVE-2024-1007: SourceCodester Employee Management System edit_profile.php sql injection
First published: Mon Jan 29 2024(Updated: )
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected is an unknown function of the file edit_profile.php. The manipulation of the argument txtfullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252276.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Employee Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-1007?
CVE-2024-1007 has been classified as critical due to the potential for SQL injection.
How do I fix CVE-2024-1007?
To fix CVE-2024-1007, it is recommended to sanitize user inputs and utilize prepared statements in the code.
Which software versions are affected by CVE-2024-1007?
CVE-2024-1007 specifically affects SourceCodester Employee Management System version 1.0.
What type of vulnerability is CVE-2024-1007?
CVE-2024-1007 is an SQL injection vulnerability that can be exploited through the edit_profile.php file.
Can CVE-2024-1007 be exploited remotely?
Yes, CVE-2024-1007 can be exploited remotely, allowing attackers to manipulate the argument txtfullname.
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/severity
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/softwarecombine
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/razormist
- canonical/employee management system
- version/employee management system/1.0