CVE-2024-8346: SourceCodester Computer Laboratory Management System SystemSettings.php update_settings_info sql injection
First published: Fri Aug 30 2024(Updated: )
A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. Affected is the function update_settings_info of the file /classes/SystemSettings.php?f=update_settings. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Computer Laboratory Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-8346?
CVE-2024-8346 is classified as a critical severity vulnerability.
How does CVE-2024-8346 affect the Computer Laboratory Management System?
CVE-2024-8346 affects the update_settings_info function in the SystemSettings.php file, leading to SQL injection.
How can I mitigate CVE-2024-8346?
To mitigate CVE-2024-8346, you should apply input validation and parameterized queries to avoid SQL injection.
What versions of the software are affected by CVE-2024-8346?
CVE-2024-8346 affects version 1.0 of the SourceCodester Computer Laboratory Management System.
Is there a patch available for CVE-2024-8346?
As of now, check with the vendor for any security patches available to address CVE-2024-8346.
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- vendor/oretnom23
- canonical/oretnom23 computer laboratory management system
- version/oretnom23 computer laboratory management system/1.0