CVE-2024-3252: SourceCodester Internship Portal Management System check_admin.php sql injection

Published Apr 3, 2024

Updated

A vulnerability classified as critical has been found in SourceCodester Internship Portal Management System 1.0. This affects an unknown part of the file admin/checkadmin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259101 was assigned to this vulnerability.

Affected Software

2 affected components

Chatikobo Internship Portal Management System=1.0

Sourcecodester Internship Portal Management System

Event History

Apr 3, 2024

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-3252?

CVE-2024-3252 is classified as a critical vulnerability.

What type of vulnerability is CVE-2024-3252?

CVE-2024-3252 is an SQL injection vulnerability.

Which part of the software is affected by CVE-2024-3252?

CVE-2024-3252 affects the file admin/check_admin.php in SourceCodester Internship Portal Management System 1.0.

How do I fix CVE-2024-3252?

To fix CVE-2024-3252, sanitize user inputs in the login forms to prevent SQL injection.

What can attackers do with CVE-2024-3252?

Attackers can exploit CVE-2024-3252 to manipulate the username/password arguments, potentially gaining unauthorized access to the system.