CVE-2024-8340: SourceCodester Electric Billing Management System Actions.php sql injection
First published: Fri Aug 30 2024(Updated: )
A vulnerability classified as critical has been found in SourceCodester Electric Billing Management System 1.0. This affects an unknown part of the file /Actions.php?a=login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| The Electric Billing Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://vuldb.com/?id.276219
- https://vuldb.com/?ctiid.276219
- https://vuldb.com/?submit.399548
- https://github.com/enjoyworld/webray.com.cn/blob/main/cves/Electric%20Billing%20Management%20System/Electric%20Billing%20Managemen%20SQL-inject%20System%20Action.php%20SQL-inject.md
- https://www.sourcecodester.com/
Frequently Asked Questions
What is the severity of CVE-2024-8340?
CVE-2024-8340 is classified as a critical vulnerability.
How does CVE-2024-8340 affect the Electric Billing Management System?
CVE-2024-8340 allows for SQL injection through the manipulation of the 'username' argument in the /Actions.php?a=login file.
Can CVE-2024-8340 be exploited remotely?
Yes, CVE-2024-8340 can be exploited remotely by an attacker.
What software version is impacted by CVE-2024-8340?
The vulnerability CVE-2024-8340 affects version 1.0 of the Electric Billing Management System.
How can I mitigate the risks associated with CVE-2024-8340?
To mitigate CVE-2024-8340, it is recommended to implement input validation and sanitize user inputs at the login endpoint.
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- agent/severity
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/oretnom23
- canonical/the electric billing management system
- version/the electric billing management system/1.0