CVE-2024-8346: SourceCodester Computer Laboratory Management System SystemSettings.php update_settings_info sql injection
A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. Affected is the function updatesettingsinfo of the file /classes/SystemSettings.php?f=updatesettings. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8346?
CVE-2024-8346 is classified as a critical severity vulnerability.
How does CVE-2024-8346 affect the Computer Laboratory Management System?
CVE-2024-8346 affects the update_settings_info function in the SystemSettings.php file, leading to SQL injection.
How can I mitigate CVE-2024-8346?
To mitigate CVE-2024-8346, you should apply input validation and parameterized queries to avoid SQL injection.
What versions of the software are affected by CVE-2024-8346?
CVE-2024-8346 affects version 1.0 of the SourceCodester Computer Laboratory Management System.
Is there a patch available for CVE-2024-8346?
As of now, check with the vendor for any security patches available to address CVE-2024-8346.