CVE-2024-3139: SourceCodester Computer Laboratory Management System save_users improper authorization
A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function saveusers of the file /classes/Users.php?f=save. The manipulation of the argument id leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-258914 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3139?
CVE-2024-3139 is classified as a critical vulnerability.
What does CVE-2024-3139 affect?
CVE-2024-3139 affects the function save_users in the file /classes/Users.php?f=save of the SourceCodester Computer Laboratory Management System 1.0.
How does CVE-2024-3139 occur?
CVE-2024-3139 occurs due to improper authorization caused by manipulation of the argument id.
How do I fix CVE-2024-3139?
To fix CVE-2024-3139, ensure proper authorization checks are implemented in the save_users function.
Is CVE-2024-3139 a known issue in other versions?
CVE-2024-3139 has been identified specifically in version 1.0 of the SourceCodester Computer Laboratory Management System.