CVE-2024-7365: SourceCodester Tracking Monitoring Management System manage_establishment.php sql injection
First published: Thu Aug 01 2024(Updated: )
A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manage_establishment.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273344.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Tracking Monitoring Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-7365?
CVE-2024-7365 is classified as a critical vulnerability.
How does CVE-2024-7365 affect the affected software?
CVE-2024-7365 allows for SQL injection through the manipulation of the 'id' argument in the /manage_establishment.php file.
How do I fix CVE-2024-7365?
Fixing CVE-2024-7365 involves sanitizing input data to prevent SQL injection attacks.
Which software versions are affected by CVE-2024-7365?
CVE-2024-7365 affects version 1.0 of the SourceCodester Tracking Monitoring Management System.
What functionalities are impacted by CVE-2024-7365?
The vulnerability impacts unknown functionalities in the file /manage_establishment.php, leading to potential exploitation.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- agent/severity
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- vendor/oretnom23
- canonical/oretnom23 tracking monitoring management system
- version/oretnom23 tracking monitoring management system/1.0