CVE-2024-7290: SourceCodester Establishment Billing Management System manage_tenant.php sql injection
A vulnerability classified as critical has been found in SourceCodester Establishment Billing Management System 1.0. This affects an unknown part of the file /managetenant.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273159.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7290?
CVE-2024-7290 is classified as a critical vulnerability.
How does CVE-2024-7290 affect the Establishment Billing Management System?
CVE-2024-7290 affects the /manage_tenant.php file, allowing for SQL injection through manipulated arguments.
Can CVE-2024-7290 be exploited remotely?
Yes, CVE-2024-7290 can be exploited remotely by an attacker.
What version of the Establishment Billing Management System is affected by CVE-2024-7290?
CVE-2024-7290 affects version 1.0 of the Establishment Billing Management System.
What type of attack is associated with CVE-2024-7290?
CVE-2024-7290 is associated with SQL injection attacks.