CVE-2024-11213: SourceCodester Best Employee Management System edit_role.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /admin/editrole.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11213?
CVE-2024-11213 is classified as a critical severity vulnerability.
How does CVE-2024-11213 affect the Best Employee Management System?
CVE-2024-11213 affects the /admin/edit_role.php file and allows for SQL injection through manipulation of the id parameter.
How can I fix CVE-2024-11213?
To fix CVE-2024-11213, ensure that proper input validation and parameterized queries are implemented in the affected file.
Is remote exploitation possible with CVE-2024-11213?
Yes, CVE-2024-11213 allows for remote exploitation via SQL injection.
Which version of the Best Employee Management System is impacted by CVE-2024-11213?
CVE-2024-11213 specifically impacts version 1.0 of the Best Employee Management System.