SQL Injection Vulnerability in SourceCodester Employee Management System
CVE-2024-1878

8.8HIGH

Key Information:

Vendor: Sourcecodester
Status: Employee Management System
Vendor: CVE Published:; 26 February 2024

🔔 Create Sourcecodester Vulnerability Alert

Badges

👾 Exploit Exists

What is CVE-2024-1878?

A vulnerability has been discovered within the SourceCodester Employee Management System 1.0 that exposes a critical security risk through an SQL injection flaw found in the /myprofile.php file. This attack exploits the manipulation of the 'id' parameter by injecting code, such as '1%20or%201=1', which allows an attacker to execute arbitrary SQL commands within the database. As a result, unauthorized users may gain access to sensitive information, modify data, or potentially take full control of the underlying database. Remedial actions should be taken promptly to mitigate the risk associated with this vulnerability. For more information, visit VDB-254726.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch