SQL Injection Vulnerability in itsourcecode Farm Management System

CVE-2024-6453

What is CVE-2024-6453?

A critical SQL injection vulnerability exists in the itsourcecode Farm Management System 1.0, specifically targeting the file /quarantine.php with an id parameter set to 3. This vulnerability arises due to improper handling of multiple parameters, including 'pigno', 'breed', and 'reason', which allows remote attackers to execute arbitrary SQL queries. Exploitable remotely, this vulnerability could lead to unauthorized data manipulation and potentially severe impacts on the application's security integrity. The issue has been publicly disclosed, heightening the urgency for affected users to apply security measures promptly.

References