First published: Tue Feb 27 2024(Updated: )
A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/login.php. The manipulation of the argument txtpassword leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254863.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Student Clearance System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-1927 is classified as a critical vulnerability due to its potential for SQL injection exploits.
To fix CVE-2024-1927, it's essential to sanitize and validate all user inputs, especially in the txtpassword parameter.
The exploitation of CVE-2024-1927 can lead to unauthorized access to the database and possible data leaks.
CVE-2024-1927 affects the Web-Based Student Clearance System version 1.0.
Any attacker with access to the login interface of the affected Web-Based Student Clearance System can exploit CVE-2024-1927.