CVE-2024-3442: SourceCodester Prison Management System delete_leave.php sql injection
First published: Mon Apr 08 2024(Updated: )
A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. This affects an unknown part of the file /Employee/delete_leave.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259695.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Prison Management System | =1.0 | |
| Prison Management System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-3442?
CVE-2024-3442 is classified as a critical severity vulnerability.
How do I fix CVE-2024-3442?
To fix CVE-2024-3442, it is recommended to update SourceCodester Prison Management System to the latest version ensuring that the SQL injection vulnerability is patched.
What type of attack does CVE-2024-3442 allow?
CVE-2024-3442 allows for SQL injection attacks which can be executed remotely.
Which part of the SourceCodester Prison Management System is affected by CVE-2024-3442?
CVE-2024-3442 affects the file /Employee/delete_leave.php in the SourceCodester Prison Management System.
Who is affected by CVE-2024-3442?
Users of SourceCodester Prison Management System version 1.0 are affected by CVE-2024-3442.
- agent/title
- agent/weakness
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/last-modified-date
- agent/severity
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/guess-ai
- vendor/fast5
- canonical/prison management system
- version/prison management system/1.0
- vendor/sourcecodester