CVE-2024-6213: SourceCodester Food Ordering Management System Login Panel login.php sql injection
First published: Fri Jun 21 2024(Updated: )
A vulnerability was found in SourceCodester Food Ordering Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file login.php of the component Login Panel. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-269277 was assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Food Ordering Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-6213?
CVE-2024-6213 has been classified as critical due to the risk of SQL injection.
How do I fix CVE-2024-6213?
To fix CVE-2024-6213, ensure that proper input validation and parameterized queries are implemented in the login.php file.
What components are affected by CVE-2024-6213?
CVE-2024-6213 affects the Login Panel component of the SourceCodester Food Ordering Management System version 1.0.
What kind of vulnerability is CVE-2024-6213?
CVE-2024-6213 is an SQL injection vulnerability that arises from improper handling of the username argument.
Is CVE-2024-6213 exploitation possible remotely?
Yes, CVE-2024-6213 can potentially be exploited remotely, allowing attackers to manipulate the SQL queries.
- agent/weakness
- agent/references
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/oretnom23
- canonical/food ordering management system
- version/food ordering management system/1.0