SQL Injection Vulnerability in itsourcecode Society Management System

CVE-2024-7194

What is CVE-2024-7194?

A critical vulnerability has been identified in version 1.0 of the itsourcecode Society Management System, affecting the file check_student.php. By manipulating the student_id parameter, an attacker can execute unauthorized SQL commands, potentially leading to unauthorized access to database information. This vulnerability can be exploited remotely, making it imperative for users of this system to implement urgent security measures. The exploit has already been disclosed publicly, heightening the risk for affected users. It is crucial to monitor for updates and apply patches as they become available to mitigate potential threats.

References