A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.275139 | Permissions Required Third Party Advisory VDB Entry |
| https://vuldb.com/?ctiid.275139 | Permissions Required Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.393525 | Issue Tracking Third Party Advisory VDB Entry |
| https://github.com/CveSecLook/cve/issues/60 | Exploit Issue Tracking |
Configurations
Configuration 1 (hide)
|
History
21 Aug 2024, 13:53
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:janobe:point_of_sales_and_inventory_management_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Janobe
Janobe point Of Sales And Inventory Management System |
|
| References | () https://vuldb.com/?id.275139 - Permissions Required, Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.275139 - Permissions Required, Third Party Advisory, VDB Entry | |
| References | () https://github.com/CveSecLook/cve/issues/60 - Exploit, Issue Tracking | |
| References | () https://vuldb.com/?submit.393525 - Issue Tracking, Third Party Advisory, VDB Entry |
20 Aug 2024, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-20 02:15
Updated : 2024-08-21 13:53
NVD link : CVE-2024-7947
Mitre link : CVE-2024-7947
JSON object : View
Products Affected
janobe
- point_of_sales_and_inventory_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')