SQL Injection Vulnerability in SourceCodester Kortex Lite Advocate Office Management System
CVE-2024-10450

9.8CRITICAL

Key Information:

Vendor

Mayurik

Status
Advocate Office Management System
Vendor
CVE Published:
28 October 2024

What is CVE-2024-10450?

A security vulnerability exists in the SourceCodester Kortex Lite Advocate Office Management System where improper handling of POST parameters in the edit_profile.php file can lead to SQL injection attacks. This flaw allows an attacker to manipulate the 'id' parameter, potentially compromising the database integrity and confidentiality. Remote exploitability of this vulnerability makes it particularly concerning, as attackers can exploit it without physical access to the system. Due diligence is essential for affected organizations to mitigate the risk of such attacks and protect sensitive data.

References

https://vuldb.com/?id.282010
https://vuldb.com/?ctiid.282010
https://vuldb.com/?submit.432614

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.