CVE-2024-4967: SourceCodester Interactive Map with Marker delete-mark.php sql injection
A vulnerability was found in SourceCodester Interactive Map with Marker 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete-mark.php. The manipulation of the argument mark leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-264535.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4967?
CVE-2024-4967 is classified as a critical vulnerability.
How do I fix CVE-2024-4967?
To mitigate CVE-2024-4967, it is recommended to sanitize and validate all user inputs in the /endpoint/delete-mark.php file.
What type of attack does CVE-2024-4967 facilitate?
CVE-2024-4967 facilitates SQL injection attacks through improper handling of input in the delete-mark.php endpoint.
Which software is affected by CVE-2024-4967?
CVE-2024-4967 affects SourceCodester Interactive Map with Marker version 1.0.
What functionality is exploited in CVE-2024-4967?
CVE-2024-4967 exploits an unknown functionality in the file /endpoint/delete-mark.php.