CVE-2024-7196: SourceCodester Complaints Report Management System sql injection
A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272617 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7196?
CVE-2024-7196 has been classified as a critical severity vulnerability.
How do I fix CVE-2024-7196?
To fix CVE-2024-7196, it is recommended to update to the latest version of the SourceCodester Complaints Report Management System after checking for official patches.
What types of attacks can exploit CVE-2024-7196?
CVE-2024-7196 can be exploited to perform SQL injection attacks through the login functionality of the system.
Which software is affected by CVE-2024-7196?
CVE-2024-7196 affects version 1.0 of the SourceCodester Complaints Report Management System.
What is the impact of a successful exploit of CVE-2024-7196?
A successful exploit of CVE-2024-7196 may allow an attacker to execute arbitrary SQL commands in the database.