A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /tracking/admin/view_itprofile.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
References
Link | Resource |
---|---|
https://github.com/Wsstiger/cve/blob/main/Tracer_sql.md | Exploit |
https://vuldb.com/?ctiid.274706 | Permissions Required VDB Entry |
https://vuldb.com/?id.274706 | VDB Entry |
https://vuldb.com/?submit.390782 | Third Party Advisory VDB Entry |
Configurations
History
19 Aug 2024, 18:12
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 6.5
v3 : 8.8 |
CPE | cpe:2.3:a:tamparongj_03:online_graduate_tracer_system:1.0:*:*:*:*:*:*:* | |
First Time |
Tamparongj 03
Tamparongj 03 online Graduate Tracer System |
|
References | () https://github.com/Wsstiger/cve/blob/main/Tracer_sql.md - Exploit | |
References | () https://vuldb.com/?ctiid.274706 - Permissions Required, VDB Entry | |
References | () https://vuldb.com/?id.274706 - VDB Entry | |
References | () https://vuldb.com/?submit.390782 - Third Party Advisory, VDB Entry | |
Summary |
|
15 Aug 2024, 02:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-08-15 02:15
Updated : 2024-08-19 18:12
NVD link : CVE-2024-7810
Mitre link : CVE-2024-7810
CVE.ORG link : CVE-2024-7810
JSON object : View
Products Affected
tamparongj_03
- online_graduate_tracer_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')