CVE-2024-7196: SourceCodester Complaints Report Management System sql injection
First published: Mon Jul 29 2024(Updated: )
A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272617 was assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Complaints Report Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-7196?
CVE-2024-7196 has been classified as a critical severity vulnerability.
How do I fix CVE-2024-7196?
To fix CVE-2024-7196, it is recommended to update to the latest version of the SourceCodester Complaints Report Management System after checking for official patches.
What types of attacks can exploit CVE-2024-7196?
CVE-2024-7196 can be exploited to perform SQL injection attacks through the login functionality of the system.
Which software is affected by CVE-2024-7196?
CVE-2024-7196 affects version 1.0 of the SourceCodester Complaints Report Management System.
What is the impact of a successful exploit of CVE-2024-7196?
A successful exploit of CVE-2024-7196 may allow an attacker to execute arbitrary SQL commands in the database.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- vendor/oretnom23
- canonical/oretnom23 complaints report management system
- version/oretnom23 complaints report management system/1.0