CVE-2024-6903: SourceCodester Record Management System sort1_user.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Record Management System 1.0. Affected by this issue is some unknown functionality of the file sort1user.php. The manipulation of the argument position leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271928.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6903?
CVE-2024-6903 is classified as a critical vulnerability.
How does CVE-2024-6903 affect the SourceCodester Record Management System?
CVE-2024-6903 allows for SQL injection through manipulation of arguments in the sort1_user.php file.
Who is affected by CVE-2024-6903?
CVE-2024-6903 affects users of SourceCodester Record Management System version 1.0.
What can an attacker do with CVE-2024-6903?
An attacker can exploit CVE-2024-6903 to execute arbitrary SQL queries against the affected system.
How do I fix CVE-2024-6903?
To mitigate CVE-2024-6903, ensure input validation and parameterized queries are implemented in the affected functionality.