CVE-2024-7947: SourceCodester Point of Sales and Inventory Management System login.php sql injection
First published: Tue Aug 20 2024(Updated: )
A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Janobe Point Of Sales And Inventory Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-7947?
CVE-2024-7947 is classified as a critical vulnerability.
How does CVE-2024-7947 exploit the system?
CVE-2024-7947 exploits the system through SQL injection via the email argument in the login.php file.
What systems are affected by CVE-2024-7947?
CVE-2024-7947 affects Janobe Point Of Sales and Inventory Management System version 1.0.
What are the potential consequences of CVE-2024-7947?
The exploitation of CVE-2024-7947 can allow remote attackers to execute arbitrary SQL commands.
How can CVE-2024-7947 be mitigated?
Mitigation of CVE-2024-7947 can involve updating to a patched version of the affected software.
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- agent/event
- agent/severity
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- vendor/janobe
- canonical/janobe point of sales and inventory management system
- version/janobe point of sales and inventory management system/1.0