Vulnerability in Electric Billing Management System Could Lead to SQL Injection
CVE-2024-8339
9.8CRITICAL
Key Information:
- Vendor
SourceCodester
- Vendor
- CVE Published:
- 30 August 2024
What is CVE-2024-8339?
A SQL injection vulnerability exists in the SourceCodester Electric Billing Management System 1.0, specifically within the Connection Code Handler functionality found at /?page=tracks. This vulnerability allows for manipulation of the 'code' argument, potentially enabling remote attackers to execute arbitrary SQL commands. Successful exploitation may lead to unauthorized access to sensitive data stored in the underlying database. The public disclosure of this exploit underscores the urgent need for affected users to apply appropriate mitigations to protect their systems.