CVE-2024-3256: SourceCodester Internship Portal Management System edit_activity.php sql injection

Published Apr 3, 2024

Updated

A vulnerability has been found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/editactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259105 was assigned to this vulnerability.

Affected Software

2 affected components

Chatikobo Internship Portal Management System=1.0

Sourcecodester Internship Portal Management System

Event History

Apr 3, 2024

CVE Published

via MITRE·12:31 PM

Data Sourced

via MITRE·12:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-3256?

CVE-2024-3256 is classified as critical due to its potential for SQL injection.

How do I fix CVE-2024-3256?

To fix CVE-2024-3256, update the SourceCodester Internship Portal Management System to the latest version that addresses this vulnerability.

What systems are affected by CVE-2024-3256?

CVE-2024-3256 affects the SourceCodester Internship Portal Management System version 1.0.

What type of vulnerability is CVE-2024-3256?

CVE-2024-3256 is categorized as an SQL injection vulnerability.

Where is the vulnerability located in CVE-2024-3256?

The vulnerability in CVE-2024-3256 exists in the file admin/edit_activity.php due to improper handling of the activity_id parameter.