Critical Vulnerability Discovered in Petrol Pump Management Software
CVE-2024-10380
7.5HIGH
Key Information
- Vendor
- Sourcecodester
- Status
- Petrol Pump Management Software
- Vendor
- CVE Published:
- 25 October 2024
Summary
A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/ajax_product.php. The manipulation of the argument drop_services leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Version(s)
Petrol Pump Management Software = 1.0
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Risk change from: null to: 6.3 - (MEDIUM)
VulDB entry last update
Vulnerability Reserved.
VulDB entry created
Advisory disclosed
Vulnerability published.
Collectors
NVD DatabaseMitre Database
Credit
K1nako (VulDB User)