SQL Injection Vulnerability in itsourcecode Bakery Online Ordering System
CVE-2024-5635
Key Information:
- Vendor
Itsourcecode
- Vendor
- CVE Published:
- 4 June 2024
Badges
What is CVE-2024-5635?
A serious security flaw has been detected in the itsourcecode Bakery Online Ordering System version 1.0, specifically in the index.php file. This vulnerability arises from improper handling of the 'txtsearch' argument, which allows attackers to execute SQL injection attacks remotely. By exploiting this flaw, malicious actors can gain unauthorized access to the underlying database, potentially leading to data leakage, data manipulation, or complete system compromise. This vulnerability has been publicly disclosed, making it crucial for users of the affected software version to promptly apply security measures.
Affected Version(s)
Bakery Online Ordering System 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.