CVE-2024-7198: SourceCodester Complaints Report Management System manage_station.php sql injection
A vulnerability classified as critical has been found in SourceCodester Complaints Report Management System 1.0. This affects an unknown part of the file /admin/managestation.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272619.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7198?
CVE-2024-7198 is classified as a critical vulnerability due to its potential for SQL injection.
How does the SQL injection in CVE-2024-7198 occur?
The SQL injection in CVE-2024-7198 occurs through the manipulation of the 'id' argument in the /admin/manage_station.php file.
What versions of the software are affected by CVE-2024-7198?
CVE-2024-7198 affects version 1.0 of the SourceCodester Complaints Report Management System.
How do I fix CVE-2024-7198?
To fix CVE-2024-7198, it is recommended to sanitize user input for the 'id' parameter and apply prepared statements in SQL queries.
Can CVE-2024-7198 be exploited remotely?
Yes, CVE-2024-7198 can be exploited remotely, allowing attackers to execute unauthorized SQL commands.