CVE-2024-6733: itsourcecode Tailoring Management System templateedit.php sql injection
A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file templateedit.php. The manipulation of the argument id/title/msg leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-271454 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6733?
CVE-2024-6733 is classified as a critical severity vulnerability.
What type of vulnerability is CVE-2024-6733?
CVE-2024-6733 is a SQL injection vulnerability affecting the file templateedit.php.
How do I fix CVE-2024-6733?
To fix CVE-2024-6733, validate and sanitize user inputs for the arguments id/title/msg in templateedit.php.
Which software is affected by CVE-2024-6733?
CVE-2024-6733 affects version 1.0 of the itsourcecode Tailoring Management System.
Can CVE-2024-6733 lead to data compromise?
Yes, CVE-2024-6733 can lead to unauthorized access and manipulation of the database due to SQL injection.