Critical Vulnerability in Tailoring Management System 1.0 Allows Remote SQL Injection

CVE-2024-11589
6.3MEDIUM

Key Information

Vendor
Itsourcecode
Status
Tailoring Management System
Vendor
CVE Published:
21 November 2024

Summary

A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /expcatedit.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Version(s)

Tailoring Management System = 1.0

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Risk change from: null to: 6.3 - (MEDIUM)

  • VulDB entry last update

  • Vulnerability Reserved.

  • VulDB entry created

  • Advisory disclosed

  • Vulnerability published.

Collectors

Mitre Database

Credit

ttttt123 (VulDB User)
.