CVE-2024-1927: SourceCodester Web-Based Student Clearance System login.php sql injection
A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/login.php. The manipulation of the argument txtpassword leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254863.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1927?
CVE-2024-1927 is classified as a critical vulnerability due to its potential for SQL injection exploits.
How do I fix CVE-2024-1927?
To fix CVE-2024-1927, it's essential to sanitize and validate all user inputs, especially in the txtpassword parameter.
What are the potential impacts of CVE-2024-1927?
The exploitation of CVE-2024-1927 can lead to unauthorized access to the database and possible data leaks.
Which software is affected by CVE-2024-1927?
CVE-2024-1927 affects the Web-Based Student Clearance System version 1.0.
Who can exploit CVE-2024-1927?
Any attacker with access to the login interface of the affected Web-Based Student Clearance System can exploit CVE-2024-1927.