CVE-2024-5069: SourceCodester Simple Online Mens Salon Management System view_service.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Simple Online Mens Salon Management System 1.0. Affected by this issue is some unknown functionality of the file viewservice.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-264926 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5069?
CVE-2024-5069 is classified as a critical vulnerability.
How does CVE-2024-5069 affect the Simple Online Mens Salon Management System?
CVE-2024-5069 allows for SQL injection through manipulation of the 'id' argument in the view_service.php file.
Who is affected by CVE-2024-5069?
CVE-2024-5069 affects users of SourceCodester Simple Online Mens Salon Management System version 1.0.
How do I fix CVE-2024-5069?
To fix CVE-2024-5069, it is recommended to sanitize and validate input on the 'id' parameter in the view_service.php file.
What type of attack can be executed using CVE-2024-5069?
CVE-2024-5069 can be exploited to perform SQL injection attacks, potentially allowing unauthorized access to the database.