CVE-2024-3253: SourceCodester Internship Portal Management System add_admin.php sql injection

Published Apr 3, 2024

Updated

A vulnerability classified as critical was found in SourceCodester Internship Portal Management System 1.0. This vulnerability affects unknown code of the file admin/addadmin.php. The manipulation of the argument name/username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-259102 is the identifier assigned to this vulnerability.

Affected Software

2 affected components

Chatikobo Internship Portal Management System=1.0

Sourcecodester Internship Portal Management System

Event History

Apr 3, 2024

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-3253?

The severity of CVE-2024-3253 is classified as critical due to the SQL injection vulnerability it introduces.

How do I fix CVE-2024-3253?

To fix CVE-2024-3253, sanitize and validate user inputs to prevent SQL injection in the admin/add_admin.php file.

Which software is affected by CVE-2024-3253?

CVE-2024-3253 affects SourceCodester Internship Portal Management System version 1.0.

What type of vulnerability is CVE-2024-3253?

CVE-2024-3253 is a SQL injection vulnerability that allows attackers to manipulate database queries.

Where is the vulnerability located in CVE-2024-3253?

The vulnerability in CVE-2024-3253 is located in the admin/add_admin.php file.