CVE-2024-3259: SourceCodester Internship Portal Management System delete_activity.php sql injection

Published Apr 3, 2024

Updated

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/deleteactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259108.

Affected Software

2 affected components

Chatikobo Internship Portal Management System=1.0

Sourcecodester Internship Portal Management System

Event History

Apr 3, 2024

CVE Published

via MITRE·01:31 PM

Data Sourced

via MITRE·01:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-3259?

CVE-2024-3259 has been declared as critical.

What type of vulnerability is CVE-2024-3259?

CVE-2024-3259 is a SQL injection vulnerability affecting the admin/delete_activity.php file.

How do I fix CVE-2024-3259?

To fix CVE-2024-3259, sanitize and validate user inputs to prevent SQL injection.

Which software is affected by CVE-2024-3259?

CVE-2024-3259 affects SourceCodester Internship Portal Management System version 1.0.

What is the impact of CVE-2024-3259?

The exploitation of CVE-2024-3259 can lead to unauthorized access to the database and manipulation of data.