CVE-2024-6216: SourceCodester Food Ordering Management System add-users.php sql injection
First published: Fri Jun 21 2024(Updated: )
A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file add-users.php. The manipulation of the argument contact leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269280.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Food Ordering Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-6216?
CVE-2024-6216 is classified as a critical vulnerability.
How does CVE-2024-6216 exploit SQL injection?
CVE-2024-6216 exploits SQL injection through the manipulation of the contact argument in the add-users.php file.
Can CVE-2024-6216 be remotely exploited?
Yes, CVE-2024-6216 can be exploited remotely.
What version of the Food Ordering Management System is affected by CVE-2024-6216?
Only version 1.0 of the SourceCodester Food Ordering Management System is affected by CVE-2024-6216.
How can I mitigate CVE-2024-6216?
To mitigate CVE-2024-6216, you should sanitize user inputs to prevent SQL injection and update to a patched version of the software.
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/oretnom23
- canonical/food ordering management system
- version/food ordering management system/1.0