CVE-2024-7376: SourceCodester Simple Realtime Quiz System print_quiz_records.php sql injection
First published: Fri Aug 02 2024(Updated: )
A vulnerability, which was classified as critical, was found in SourceCodester Simple Realtime Quiz System 1.0. Affected is an unknown function of the file /print_quiz_records.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273360.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Simple Realtime Quiz System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-7376?
CVE-2024-7376 is classified as a critical vulnerability due to its potential for SQL injection exploits.
How does CVE-2024-7376 affect the application?
CVE-2024-7376 affects the SourceCodester Simple Realtime Quiz System 1.0 by allowing attackers to manipulate the 'id' argument to perform SQL injection.
How can I fix CVE-2024-7376?
To fix CVE-2024-7376, update the SourceCodester Simple Realtime Quiz System to a patched version that addresses the SQL injection vulnerability.
Who is affected by CVE-2024-7376?
Users of SourceCodester Simple Realtime Quiz System version 1.0 are affected by CVE-2024-7376.
What type of vulnerability is CVE-2024-7376?
CVE-2024-7376 is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands.
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- vendor/oretnom23
- canonical/oretnom23 simple realtime quiz system
- version/oretnom23 simple realtime quiz system/1.0