CVE-2024-1876: SourceCodester Employee Management System psubmit.php sql injection
First published: Mon Feb 26 2024(Updated: )
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /psubmit.php. The manipulation of the argument pid with the input '+or+1%3d1%23 leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254724.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Employee Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-1876?
CVE-2024-1876 has been classified as critical due to its potential for SQL injection exploitation.
How does CVE-2024-1876 affect the SourceCodester Employee Management System?
CVE-2024-1876 affects the Employee Management System 1.0 through an insecurity in the /psubmit.php file allowing SQL injection.
How do I fix CVE-2024-1876?
To fix CVE-2024-1876, sanitize and validate user input to prevent SQL injection vulnerabilities.
What are the potential consequences of exploiting CVE-2024-1876?
Exploiting CVE-2024-1876 could allow attackers to manipulate the database, extract sensitive information, or disrupt system integrity.
Who is affected by CVE-2024-1876?
CVE-2024-1876 specifically affects users of the SourceCodester Employee Management System version 1.0.
- agent/weakness
- agent/references
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/razormist
- canonical/employee management system
- version/employee management system/1.0