CVE-2024-40402

A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attackers to inject malicious SQL queries.
CVSS

No CVSS.

References
Link Resource
https://github.com/CveSecLook/cve/issues/49 Exploit Third Party Advisory
https://github.com/CveSecLook/cve/issues/49 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:nikhil-bhalerao:simple_library_management_system:1.0:*:*:*:*:*:*:*

History

23 Apr 2025, 14:19

Type Values Removed Values Added
First Time Nikhil-bhalerao
Nikhil-bhalerao simple Library Management System
References () https://github.com/CveSecLook/cve/issues/49 - () https://github.com/CveSecLook/cve/issues/49 - Exploit, Third Party Advisory
CPE cpe:2.3:a:nikhil-bhalerao:simple_library_management_system:1.0:*:*:*:*:*:*:*

17 Jul 2024, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-17 20:15

Updated : 2025-04-23 14:19


NVD link : CVE-2024-40402

Mitre link : CVE-2024-40402


JSON object : View

Products Affected

nikhil-bhalerao

  • simple_library_management_system
CWE

No CWE.