SourceCodester Event Registration System login.php sql injection
CVE-2024-5118
Key Information:
- Vendor
Sourcecodester
- Vendor
- CVE Published:
- 20 May 2024
Badges
What is CVE-2024-5118?
A SQL injection vulnerability has been identified in the SourceCodester Event Registration System version 1.0. This flaw resides within the /admin/login.php file, where manipulation of the username and password arguments can allow attackers to execute arbitrary SQL queries against the backend database. The vulnerability enables remote attackers to initiate an exploit, potentially leading to unauthorized access and data breaches. The issue has been publicly disclosed, raising concerns about its exploitation among users of the affected system. Organizations using this version of the software should take immediate steps to mitigate risks associated with this vulnerability.
Affected Version(s)
Event Registration System 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.