SQL Injection Vulnerability in Sourcecodester Gas Agency Management System
CVE-2024-36568
9.8CRITICAL
What is CVE-2024-36568?
The Sourcecodester Gas Agency Management System version 1.0 is susceptible to a SQL injection vulnerability through the endpoint '/gasmark/editbrand.php?id='. This flaw permits attackers to execute arbitrary SQL commands, potentially compromising the integrity and confidentiality of the database. By manipulating the input parameters, unauthorized users can access, modify, or delete sensitive information stored in the database, posing serious risks to data security and integrity. Companies using this software version are advised to apply necessary security measures to mitigate this vulnerability.