SQL Injection Vulnerability in SourceCodeHero Clothes Recommendation System
CVE-2024-10338
What is CVE-2024-10338?
The Clothes Recommendation System developed by SourceCodeHero is susceptible to a SQL Injection vulnerability. This issue arises in the admin interface, particularly tied to the /admin/home.php file, where the manipulation of the 'view' parameter can lead to unauthorized SQL queries. This vulnerability is critical as it allows remote attackers to exploit the system, potentially gaining access to sensitive data or compromising application integrity. As this exploit has been publicly disclosed, it is vital for users and administrators to apply necessary security patches and take preventive measures to protect against potential attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Clothes Recommendation System 1.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
