CVE-2024-7363: SourceCodester Tracking Monitoring Management System manage_person.php sql injection
First published: Thu Aug 01 2024(Updated: )
A vulnerability, which was classified as critical, was found in SourceCodester Tracking Monitoring Management System 1.0. Affected is an unknown function of the file /manage_person.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-273342 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Tracking Monitoring Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-7363?
CVE-2024-7363 has been classified as a critical vulnerability.
How does CVE-2024-7363 affect the SourceCodester Tracking Monitoring Management System?
CVE-2024-7363 allows for SQL injection through manipulation of the 'id' argument in the /manage_person.php file.
How can I mitigate the risks associated with CVE-2024-7363?
To mitigate CVE-2024-7363, ensure input validation and use prepared statements to prevent SQL injection.
Is there a patch available for CVE-2024-7363?
As of now, there are no official patches released for CVE-2024-7363, but users should monitor for updates.
What versions are affected by CVE-2024-7363?
CVE-2024-7363 affects version 1.0 of the SourceCodester Tracking Monitoring Management System.
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/first-publish-date
- agent/severity
- agent/last-modified-date
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- vendor/oretnom23
- canonical/oretnom23 tracking monitoring management system
- version/oretnom23 tracking monitoring management system/1.0