Critical Vulnerability in SourceCodester Stock Management System 1.0 Allows Remote SQL Injection

CVE-2024-5515

6.3MEDIUM

Key Information

Vendor: Sourcecodester
Status: Stock Management System
Vendor: CVE Published:; 30 May 2024

Summary

A vulnerability was found in SourceCodester Stock Management System 1.0. It has been classified as critical. Affected is an unknown function of the file createBrand.php. The manipulation of the argument brandName leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-266586 is the identifier assigned to this vulnerability.

Affected Version(s)

Stock Management System = 1.0

CVSS V3.1

Score:

6.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Risk change from: null to: 6.3 - (MEDIUM)
May 30, 2024
VulDB entry last update
May 30, 2024
Vulnerability Reserved.
May 30, 2024
VulDB entry created
May 30, 2024
Advisory disclosed
May 30, 2024
Vulnerability published.
May 30, 2024

Collectors

NVD DatabaseMitre Database

Credit

Wang Haojian (VulDB User)