CVE-2024-6471: SourceCodester Online Tours & Travels Management sms_setting.php sql injection
A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file smssetting.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-270279.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6471?
CVE-2024-6471 is classified as a critical vulnerability.
How does CVE-2024-6471 affect the software?
CVE-2024-6471 allows for SQL injection through the manipulation of the uname argument in the sms_setting.php file.
Can CVE-2024-6471 be exploited remotely?
Yes, CVE-2024-6471 can be exploited remotely.
What software version is affected by CVE-2024-6471?
CVE-2024-6471 affects version 1.0 of the Mayurik Online Tours & Travels Management System.
How can I mitigate the risk of CVE-2024-6471?
To mitigate CVE-2024-6471, sanitize and validate input data to prevent SQL injection.