CVE-2024-7167: SourceCodester School Fees Payment System manage_course.php sql injection
A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /managecourse.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272581 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7167?
CVE-2024-7167 has been classified as a critical severity vulnerability.
How does the SQL injection vulnerability in CVE-2024-7167 work?
CVE-2024-7167 exploits an SQL injection through manipulation of the id parameter in the /manage_course.php file.
What versions of SourceCodester School Fees Payment System are affected by CVE-2024-7167?
CVE-2024-7167 affects version 1.0 of the SourceCodester School Fees Payment System.
How do I fix CVE-2024-7167?
To fix CVE-2024-7167, sanitize and validate user inputs in the /manage_course.php file to prevent SQL injection.
Is there a workaround for CVE-2024-7167 until a patch is available?
Currently, there are no specific workarounds documented for CVE-2024-7167, and it is recommended to apply security patches as soon as they are released.