A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and potential compromise of sensitive data within the database.
References
| Link | Resource |
|---|---|
| https://www.sourcecodester.com/php/15180/cab-management-system-phpoop-free-source-code.html | Product |
| https://github.com/vighneshnair7/CVE-2024-51030 | Third Party Advisory |
Configurations
History
13 Nov 2024, 16:47
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-89 | |
| CPE | cpe:2.3:a:oretnom23:cab_management_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Oretnom23 cab Management System
Oretnom23 |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| References | () https://www.sourcecodester.com/php/15180/cab-management-system-phpoop-free-source-code.html - Product | |
| References | () https://github.com/vighneshnair7/CVE-2024-51030 - Third Party Advisory |
08 Nov 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-08 18:15
Updated : 2024-11-13 16:47
NVD link : CVE-2024-51030
Mitre link : CVE-2024-51030
JSON object : View
Products Affected
oretnom23
- cab_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')