CVE-2024-6218: itsourcecode Vehicle Management System busprofile.php sql injection
A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. Affected by this issue is some unknown functionality of the file busprofile.php. The manipulation of the argument busid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-269282 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6218?
CVE-2024-6218 is classified as a critical vulnerability.
How does CVE-2024-6218 affect the Vehicle Management System?
CVE-2024-6218 allows for SQL injection through manipulation of the 'busid' argument in the busprofile.php file.
Who is affected by CVE-2024-6218?
Any user of the Adrianmercurio Vehicle Management System version 1.0 is affected by CVE-2024-6218.
How do I fix CVE-2024-6218?
To fix CVE-2024-6218, it's advisable to validate and sanitize user inputs for the 'busid' parameter.
What is the potential impact of exploiting CVE-2024-6218?
Exploiting CVE-2024-6218 could lead to unauthorized access to the database and manipulation of sensitive data.