CVE-2024-3131: SourceCodester Computer Laboratory Management System sql injection

Published Apr 1, 2024

Updated

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=savecategory. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-258874 is the identifier assigned to this vulnerability.

Affected Software

2 affected components

oretnom23 Computer Laboratory Management System=1.0

Sourcecodester Computer Laboratory Management System

Event History

Apr 1, 2024

CVE Published

via MITRE·04:31 PM

Data Sourced

via MITRE·04:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-3131?

CVE-2024-3131 has been declared as critical.

What type of vulnerability is CVE-2024-3131?

CVE-2024-3131 is a SQL injection vulnerability.

How can I patch CVE-2024-3131?

To patch CVE-2024-3131, ensure that the input filtering of the 'id' argument in the /classes/Master.php file is properly implemented to prevent SQL injection.

What systems are affected by CVE-2024-3131?

CVE-2024-3131 affects SourceCodester Computer Laboratory Management System version 1.0.

What could an attacker potentially achieve by exploiting CVE-2024-3131?

An attacker exploiting CVE-2024-3131 could manipulate the database through unauthorized SQL commands.