SQL Injection Vulnerability in SourceCodester Employee Management System
CVE-2024-1877

8.8HIGH

Key Information:

Vendor: Sourcecodester
Status: Employee Management System
Vendor: CVE Published:; 26 February 2024

🔔 Create Sourcecodester Vulnerability Alert

Badges

👾 Exploit Exists

What is CVE-2024-1877?

A vulnerability has been identified in the SourceCodester Employee Management System version 1.0, specifically affecting the /cancel.php file. This flaw allows for SQL injection via manipulation of the 'id' parameter with an input string such as '1%20or%201=1'. This type of attack can be executed remotely, which raises serious security concerns for users. As the exploit has already been publicly disclosed, it is essential for organizations utilizing this system to assess their defenses and implement necessary mitigations against potential unauthorized access or data breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch