CVE-2024-5120: SourceCodester Event Registration System sql injection
First published: Mon May 20 2024(Updated: )
A vulnerability was found in SourceCodester Event Registration System 1.0. It has been classified as critical. Affected is an unknown function of the file /registrar/?page=registration. The manipulation of the argument e leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265200.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Event Registration System | ||
| Oretnom23 Event Registration System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-5120?
CVE-2024-5120 has been classified as critical.
How does CVE-2024-5120 affect the SourceCodester Event Registration System?
CVE-2024-5120 allows for SQL injection through the manipulation of the argument 'e' in the file /registrar/?page=registration.
Which version of the Event Registration System is vulnerable to CVE-2024-5120?
Version 1.0 of the SourceCodester Event Registration System is vulnerable to CVE-2024-5120.
What could an attacker achieve by exploiting CVE-2024-5120?
An attacker could potentially launch remote attacks resulting in unauthorized access to sensitive data.
How can I mitigate the risks associated with CVE-2024-5120?
Mitigation for CVE-2024-5120 includes validating and sanitizing user inputs to prevent SQL injection attacks.
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- agent/event
- vendor/sourcecodester
- canonical/sourcecodester event registration system
- vendor/oretnom23
- canonical/oretnom23 event registration system
- version/oretnom23 event registration system/1.0