CVE-2024-1831: SourceCodester Complete File Management System Login Form index.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Complete File Management System 1.0. Affected is an unknown function of the file users/index.php of the component Login Form. The manipulation of the argument username with the input torada%27+or+%271%27+%3D+%271%27+--+- leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-254622 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1831?
CVE-2024-1831 is classified as a critical vulnerability.
How do I fix CVE-2024-1831?
To fix CVE-2024-1831, it's recommended to validate and sanitize user input in the login form to prevent SQL injection.
What component is affected by CVE-2024-1831?
CVE-2024-1831 affects the Login Form component of the SourceCodester Complete File Management System version 1.0.
What type of vulnerability is CVE-2024-1831?
CVE-2024-1831 is a SQL injection vulnerability that can lead to unauthorized bypass of authentication.
Which software is affected by CVE-2024-1831?
CVE-2024-1831 affects the SourceCodester Complete File Management System version 1.0.