A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part of the file remove_inbox_message.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240909 was assigned to this vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-source | Jul 10, 2024 | Sep 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub