SQL Injection Vulnerability in SourceCodester Accounts Manager App

CVE-2024-7748

Summary

A serious vulnerability has been discovered in version 1.0 of the SourceCodester Accounts Manager App. The issue pertains to improper processing of the /endpoint/delete-account.php file, allowing attackers to manipulate the 'account' parameter, leading to SQL injection vulnerabilities. This remote exploit can enable malicious actors to execute unauthorized SQL commands, potentially compromising sensitive data and user accounts. The vulnerability has been publicly disclosed, increasing the urgency for users to implement security measures and apply updates to mitigate the risk.

References