CVE-2024-5120: SourceCodester Event Registration System sql injection
A vulnerability was found in SourceCodester Event Registration System 1.0. It has been classified as critical. Affected is an unknown function of the file /registrar/?page=registration. The manipulation of the argument e leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265200.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5120?
CVE-2024-5120 has been classified as critical.
How does CVE-2024-5120 affect the SourceCodester Event Registration System?
CVE-2024-5120 allows for SQL injection through the manipulation of the argument 'e' in the file /registrar/?page=registration.
Which version of the Event Registration System is vulnerable to CVE-2024-5120?
Version 1.0 of the SourceCodester Event Registration System is vulnerable to CVE-2024-5120.
What could an attacker achieve by exploiting CVE-2024-5120?
An attacker could potentially launch remote attacks resulting in unauthorized access to sensitive data.
How can I mitigate the risks associated with CVE-2024-5120?
Mitigation for CVE-2024-5120 includes validating and sanitizing user inputs to prevent SQL injection attacks.