SQL Injection Vulnerability in ItsourceCode Learning Management System
CVE-2024-5519

9.8CRITICAL

Key Information:

Vendor: Itsourcecode
Status: Learning Management System Project In PHP
Vendor: CVE Published:; 30 May 2024

🔔 Create Itsourcecode Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2024-5519?

A severe SQL injection vulnerability has been identified in the ItsourceCode Learning Management System Project in PHP version 1.0. This vulnerability resides in the login.php file, specifically in the manipulation of the 'user_email' argument. Attackers can exploit this flaw remotely, potentially gaining unauthorized access to the database. Once exploited, attackers may execute arbitrary SQL queries, leading to unauthorized data retrieval or manipulation. With the exploit publicly disclosed, it's crucial for organizations using this software to implement immediate security measures to protect sensitive data.

Affected Version(s)

Learning Management System Project In PHP 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2024-5519 - Proof of Concept