CVE-2024-6902: SourceCodester Record Management System sort_user.php sql injection
A vulnerability classified as critical was found in SourceCodester Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file sortuser.php. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271927.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6902?
CVE-2024-6902 is classified as a critical vulnerability.
How does CVE-2024-6902 impact the system?
CVE-2024-6902 allows for SQL injection due to improper handling of the 'sort' argument in the sort_user.php file.
Can CVE-2024-6902 be exploited remotely?
Yes, CVE-2024-6902 can be exploited remotely by an attacker.
What software is affected by CVE-2024-6902?
CVE-2024-6902 affects SourceCodester Record Management System version 1.0.
How do I fix CVE-2024-6902?
To fix CVE-2024-6902, it is recommended to sanitize and validate input parameters to prevent SQL injection.