CVE-2024-5378: SourceCodester School Intramurals Student Attendance Management System manage_sy.php sql injection
A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /managesy.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-266290 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5378?
CVE-2024-5378 has been declared as critical.
How does CVE-2024-5378 affect the SourceCodester School Intramurals Student Attendance Management System?
CVE-2024-5378 allows for SQL injection through manipulating the id argument in the /manage_sy.php file.
What systems are affected by CVE-2024-5378?
CVE-2024-5378 affects version 1.0 of the SourceCodester School Intramurals Student Attendance Management System.
How do I fix the vulnerability identified as CVE-2024-5378?
To fix CVE-2024-5378, ensure proper input validation and sanitization for the id parameter in the affected file.
What type of vulnerability is CVE-2024-5378 classified as?
CVE-2024-5378 is classified as an SQL injection vulnerability.