CVE-2024-6957: itsourcecode University Management System Login functions.php sql injection
A vulnerability classified as critical has been found in itsourcecode University Management System 1.0. This affects an unknown part of the file functions.php of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272079.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6957?
CVE-2024-6957 is classified as critical due to its potential to lead to SQL injection vulnerabilities.
How do I fix CVE-2024-6957?
To fix CVE-2024-6957, sanitize and validate the username input in the functions.php file to prevent SQL injection.
Which software is affected by CVE-2024-6957?
CVE-2024-6957 affects version 1.0 of the Angeljudesuarez University Management System.
What type of vulnerability is CVE-2024-6957?
CVE-2024-6957 is an SQL injection vulnerability that can be exploited through the login component.
Is CVE-2024-6957 exploitable remotely?
Yes, CVE-2024-6957 can be exploited remotely if an attacker can access the affected login functionality.