CVE-2024-51030: SQL Injection

Published Nov 8, 2024

Updated

A SQL injection vulnerability in manageclient.php and viewcab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and potential compromise of sensitive data within the database.

Affected Software

1 affected component

oretnom23 Cab Management System=1.0

Event History

Nov 8, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2024-51030?

CVE-2024-51030 has a high severity rating due to its potential for unauthorized access and data compromise.

How do I fix CVE-2024-51030?

To fix CVE-2024-51030, validate and sanitize all user inputs in manage_client.php and view_cab.php to prevent SQL injection.

What systems are affected by CVE-2024-51030?

CVE-2024-51030 affects Sourcecodester Cab Management System version 1.0.

Can CVE-2024-51030 be exploited remotely?

Yes, CVE-2024-51030 can be exploited remotely through crafted requests to the affected PHP files.

What kind of data could be compromised by CVE-2024-51030?

CVE-2024-51030 could compromise sensitive data stored within the database, depending on the SQL commands executed.