SourceCodester Complete File Management System Login Form index.php sql injection
Vulnerability Description
A vulnerability, which was classified as critical, was found in SourceCodester Complete File Management System 1.0. Affected is an unknown function of the file users/index.php of the component Login Form. The manipulation of the argument username with the input torada%27+or+%271%27+%3D+%271%27+--+- leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-254622 is the identifier assigned to this vulnerability.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-1831
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- torada (VulDB User)
References
More from SourceCodester
View All →Affected Vendor
SourceCodester
View all reports →