CVE-2024-4967: SourceCodester Interactive Map with Marker delete-mark.php sql injection
First published: Thu May 16 2024(Updated: )
A vulnerability was found in SourceCodester Interactive Map with Marker 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete-mark.php. The manipulation of the argument mark leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-264535.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Interactive Map with Marker | ||
| Rems Interactive Map With Marker | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-4967?
CVE-2024-4967 is classified as a critical vulnerability.
How do I fix CVE-2024-4967?
To mitigate CVE-2024-4967, it is recommended to sanitize and validate all user inputs in the /endpoint/delete-mark.php file.
What type of attack does CVE-2024-4967 facilitate?
CVE-2024-4967 facilitates SQL injection attacks through improper handling of input in the delete-mark.php endpoint.
Which software is affected by CVE-2024-4967?
CVE-2024-4967 affects SourceCodester Interactive Map with Marker version 1.0.
What functionality is exploited in CVE-2024-4967?
CVE-2024-4967 exploits an unknown functionality in the file /endpoint/delete-mark.php.
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/event
- vendor/sourcecodester
- canonical/sourcecodester interactive map with marker
- vendor/rems
- canonical/rems interactive map with marker
- version/rems interactive map with marker/1.0