CVE-2024-6736: SourceCodester Employee and Visitor Gate Pass Logging System view_employee.php sql injection
First published: Mon Jul 15 2024(Updated: )
A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown processing of the file view_employee.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-271457 was assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Employee and Visitor Gate Pass Logging System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-6736?
CVE-2024-6736 has been rated as critical due to its potential for SQL injection.
How do I fix CVE-2024-6736?
To fix CVE-2024-6736, ensure that user inputs in the view_employee.php file are properly sanitized to prevent SQL injection.
Which software is affected by CVE-2024-6736?
CVE-2024-6736 affects SourceCodester Employee and Visitor Gate Pass Logging System version 1.0.
What type of vulnerability is CVE-2024-6736?
CVE-2024-6736 is classified as an SQL injection vulnerability.
What impact could CVE-2024-6736 have on a system?
Exploiting CVE-2024-6736 could allow an attacker to manipulate the database through unauthorized SQL commands.
- agent/weakness
- agent/title
- agent/references
- agent/first-publish-date
- agent/description
- agent/type
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/oretnom23
- canonical/sourcecodester employee and visitor gate pass logging system
- version/sourcecodester employee and visitor gate pass logging system/1.0