CVE-2024-10163: SourceCodester Sentiment Based Movie Rating System movie_details.php sql injection
First published: Sun Oct 20 2024(Updated: )
A vulnerability was found in SourceCodester Sentiment Based Movie Rating System 1.0. It has been classified as critical. Affected is an unknown function of the file /msrps/movie_details.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher disclosure mentions a slightly changed product name.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Sentiment Based Movie Rating System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-10163?
CVE-2024-10163 has been classified as a critical vulnerability.
What type of vulnerability is CVE-2024-10163?
CVE-2024-10163 is an SQL injection vulnerability.
Which component is affected by CVE-2024-10163?
CVE-2024-10163 affects the movie_details.php file within the SourceCodester Sentiment Based Movie Rating System 1.0.
How do I fix CVE-2024-10163?
To fix CVE-2024-10163, validate and sanitize user inputs, particularly the 'id' parameter.
What are the potential impacts of CVE-2024-10163?
CVE-2024-10163 can potentially allow an attacker to execute arbitrary SQL commands on the database.
- agent/weakness
- agent/title
- agent/type
- agent/references
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/oretnom23
- canonical/sourcecodester sentiment based movie rating system
- version/sourcecodester sentiment based movie rating system/1.0