CVE-2024-5985: SourceCodester Best Online News Portal index.php sql injection
A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-268461 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5985?
CVE-2024-5985 is classified as a critical vulnerability.
What type of vulnerability is CVE-2024-5985?
CVE-2024-5985 is a SQL injection vulnerability.
How does CVE-2024-5985 affect the application?
CVE-2024-5985 allows remote attackers to manipulate the username argument in the /admin/index.php file.
How do I fix CVE-2024-5985?
To fix CVE-2024-5985, sanitize and validate all user inputs and use prepared statements in your database queries.
What software is affected by CVE-2024-5985?
CVE-2024-5985 affects version 1.0 of the Mayurik Best Online News Portal.