SQL Injection Vulnerability in itsourcecode Online Blood Bank Management System
CVE-2024-7320
Key Information:
- Vendor
Itsourcecode
- Vendor
- CVE Published:
- 31 July 2024
Badges
What is CVE-2024-7320?
An SQL injection vulnerability exists in the itsourcecode Online Blood Bank Management System version 1.0, affecting the admin login functionality located in the /admin/index.php file. This flaw allows remote attackers to manipulate input arguments, specifically the 'user' argument, enabling them to execute arbitrary SQL commands in the database. If exploited, this vulnerability could compromise the integrity and confidentiality of sensitive data stored in the system. Immediate action is recommended for users to mitigate the risk associated with this publicly disclosed vulnerability.
Affected Version(s)
Online Blood Bank Management System 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V3.1
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved