SourceCodester School Log Management System manage_user.php sql injection
CVE-2024-7221

5.3MEDIUM

Key Information:

Vendor: Sourcecodester
Status: School Log Management System
Vendor: CVE Published:; 30 July 2024

🔔 Create Sourcecodester Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2024-7221?

A vulnerability has been identified in the SourceCodester School Log Management System version 1.0, specifically within the /admin/manage_user.php file. The flaw relates to improper handling of the 'id' argument, which may allow an attacker to leverage SQL injection techniques to manipulate database queries. This exploitation can be executed remotely, posing significant risks to data security and system integrity. As the vulnerability has been publicly disclosed, it is vital for users of the affected product to implement immediate security measures to mitigate potential threats.

Affected Version(s)

School Log Management System 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2024-7221 - Proof of Concept