A vulnerability was found in SourceCodester Yoga Class Registration System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=categories/view_category. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.274758 | VDB Entry |
| https://vuldb.com/?ctiid.274758 | Permissions Required VDB Entry |
| https://vuldb.com/?submit.391666 | VDB Entry |
| https://github.com/Wsstiger/cve/blob/main/Yoga_sql.md | Exploit Third Party Advisory |
Configurations
History
29 Aug 2024, 15:22
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:oretnom23:yoga_class_registration_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Oretnom23
Oretnom23 yoga Class Registration System |
28 Aug 2024, 21:03
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:tips23:yoga_class_registration_system:1.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| First Time |
Tips23
Tips23 yoga Class Registration System |
|
| References | () https://github.com/Wsstiger/cve/blob/main/Yoga_sql.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?id.274758 - VDB Entry | |
| References | () https://vuldb.com/?ctiid.274758 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?submit.391666 - VDB Entry |
16 Aug 2024, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-16 02:15
Updated : 2024-08-29 15:22
NVD link : CVE-2024-7853
Mitre link : CVE-2024-7853
JSON object : View
Products Affected
oretnom23
- yoga_class_registration_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')