CVE-2024-6216: SourceCodester Food Ordering Management System add-users.php sql injection
A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file add-users.php. The manipulation of the argument contact leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269280.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6216?
CVE-2024-6216 is classified as a critical vulnerability.
How does CVE-2024-6216 exploit SQL injection?
CVE-2024-6216 exploits SQL injection through the manipulation of the contact argument in the add-users.php file.
Can CVE-2024-6216 be remotely exploited?
Yes, CVE-2024-6216 can be exploited remotely.
What version of the Food Ordering Management System is affected by CVE-2024-6216?
Only version 1.0 of the SourceCodester Food Ordering Management System is affected by CVE-2024-6216.
How can I mitigate CVE-2024-6216?
To mitigate CVE-2024-6216, you should sanitize user inputs to prevent SQL injection and update to a patched version of the software.