CVE-2024-8347: SourceCodester Computer Laboratory Management System Master.php delete_record sql injection

Published Aug 30, 2024

Updated

A vulnerability classified as critical was found in SourceCodester Computer Laboratory Management System 1.0. Affected by this vulnerability is the function deleterecord of the file /classes/Master.php?f=deleterecord. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

oretnom23 Computer Laboratory Management System=1.0

Event History

Aug 30, 2024

CVE Published

via MITRE·09:31 PM

Data Sourced

via MITRE·09:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-8347?

CVE-2024-8347 is classified as a critical vulnerability.

How does CVE-2024-8347 impact the Computer Laboratory Management System?

CVE-2024-8347 allows an attacker to perform SQL injection through the delete_record function.

What versions of the Computer Laboratory Management System are affected by CVE-2024-8347?

CVE-2024-8347 affects version 1.0 of the Computer Laboratory Management System.

How can I remediate CVE-2024-8347?

To fix CVE-2024-8347, it is recommended to validate and sanitize input parameters in the delete_record function.

What type of vulnerability is CVE-2024-8347 categorized as?

CVE-2024-8347 is categorized as an SQL injection vulnerability.