CVE-2024-3257: SourceCodester Internship Portal Management System edit_activity_query.php sql injection

Published Apr 3, 2024

Updated

A vulnerability was found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/editactivityquery.php. The manipulation of the argument title/description/start/end leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-259106 is the identifier assigned to this vulnerability.

Affected Software

2 affected components

Chatikobo Internship Portal Management System=1.0

Sourcecodester Internship Portal Management System

Event History

Apr 3, 2024

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-3257?

CVE-2024-3257 is classified as a critical vulnerability.

What functionality is affected by CVE-2024-3257?

The vulnerability affects an unknown functionality in the file admin/edit_activity_query.php.

What types of input can be manipulated in CVE-2024-3257?

CVE-2024-3257 allows manipulation of the arguments title, description, start, and end.

What type of vulnerability is CVE-2024-3257?

CVE-2024-3257 is a SQL injection vulnerability.

How do I fix CVE-2024-3257?

To fix CVE-2024-3257, ensure input validation and prepared statements are implemented for SQL queries.