CVE-2024-7638: SourceCodester Kortex Lite Advocate Office Management System delete_client.php sql injection
First published: Fri Aug 09 2024(Updated: )
A vulnerability classified as critical has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the file delete_client.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| mayurik Advocate Office Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-7638?
CVE-2024-7638 is classified as a critical vulnerability.
How does CVE-2024-7638 affect the Advocate Office Management System?
CVE-2024-7638 affects the delete_client.php file, leading to a SQL injection vulnerability.
How can I fix CVE-2024-7638?
To fix CVE-2024-7638, sanitize and validate all user inputs for the 'id' parameter in the delete_client.php file.
Is CVE-2024-7638 exploited remotely?
Yes, CVE-2024-7638 can be exploited remotely by manipulating the 'id' argument.
Which version of the Advocate Office Management System is affected by CVE-2024-7638?
CVE-2024-7638 affects version 1.0 of the Mayurik Advocate Office Management System.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- vendor/mayurik
- canonical/mayurik advocate office management system
- version/mayurik advocate office management system/1.0