First published: Fri May 17 2024(Updated: )
A vulnerability, which was classified as critical, has been found in SourceCodester Simple Online Mens Salon Management System 1.0. Affected by this issue is some unknown functionality of the file view_service.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-264926 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oretnom23 Simple Online Men's Salon Management System | ||
Oretnom23 Simple Online Men's Salon Management System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-5069 is classified as a critical vulnerability.
CVE-2024-5069 allows for SQL injection through manipulation of the 'id' argument in the view_service.php file.
CVE-2024-5069 affects users of SourceCodester Simple Online Mens Salon Management System version 1.0.
To fix CVE-2024-5069, it is recommended to sanitize and validate input on the 'id' parameter in the view_service.php file.
CVE-2024-5069 can be exploited to perform SQL injection attacks, potentially allowing unauthorized access to the database.