CVE-2024-5384: SourceCodester Facebook News Feed Like index.php sql injection
Published May 26, 2024
·Updated
A vulnerability classified as critical was found in SourceCodester Facebook News Feed Like 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to sql injection. The attack can be initiated remotely. VDB-266302 is the identifier assigned to this vulnerability.
Affected Software
2 affected components
Sourcecodester Facebook News Feed Like
oretnom23 Facebook News Feed Like=1.0
Event History
May 26, 2024
CVE Published
via MITRE·11:31 PM
Data Sourced
via MITRE·11:31 PM
DescriptionSeverityWeakness
May 27, 2024
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Apr 3, 58462
Event
via NVD·02:24 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-5384?
CVE-2024-5384 is classified as a critical severity vulnerability.
2
What type of vulnerability is CVE-2024-5384?
CVE-2024-5384 is an SQL injection vulnerability.
3
How can CVE-2024-5384 be exploited?
CVE-2024-5384 can be exploited remotely by manipulating the 'page' argument in the index.php file.
4
Which software is affected by CVE-2024-5384?
CVE-2024-5384 affects SourceCodester Facebook News Feed Like version 1.0.
5
How do I fix CVE-2024-5384?
To fix CVE-2024-5384, input validation and parameterized queries should be implemented in the affected SQL code.