CVE-2024-8336: SourceCodester Music Gallery Site Master.php sql injection
A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. Affected by this vulnerability is an unknown functionality of the file /php-music/classes/Master.php?f=deletemusic. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8336?
CVE-2024-8336 is classified as a critical vulnerability.
How does CVE-2024-8336 affect the Music Gallery Site?
CVE-2024-8336 allows for SQL injection through the manipulation of the 'id' parameter in the delete_music functionality.
How do I fix CVE-2024-8336?
To fix CVE-2024-8336, sanitize and validate user inputs for the 'id' parameter in the Master.php file.
Which version of Music Gallery Site is vulnerable to CVE-2024-8336?
Only version 1.0 of the Oretnom23 Music Gallery Site is affected by CVE-2024-8336.
What is the potential impact of exploiting CVE-2024-8336?
Exploiting CVE-2024-8336 could allow an attacker to execute unauthorized SQL commands on the database.