CVE-2024-8348: SourceCodester Computer Laboratory Management System Master.php delete_category sql injection

Published Aug 30, 2024

Updated

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function deletecategory of the file /classes/Master.php?f=deletecategory. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

oretnom23 Computer Laboratory Management System=1.0

Event History

Aug 30, 2024

CVE Published

via MITRE·09:31 PM

Data Sourced

via MITRE·09:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-8348?

CVE-2024-8348 is classified as a critical vulnerability.

How do I fix CVE-2024-8348?

To fix CVE-2024-8348, update your SourceCodester Computer Laboratory Management System to the latest version that addresses this vulnerability.

What kind of vulnerability is CVE-2024-8348?

CVE-2024-8348 is an SQL injection vulnerability affecting the delete_category function.

Which software version does CVE-2024-8348 affect?

CVE-2024-8348 affects SourceCodester Computer Laboratory Management System version 1.0.

What is impacted by CVE-2024-8348?

CVE-2024-8348 allows unauthorized manipulation of the argument id, leading to SQL injection risks.