SQL Injection Vulnerability in SourceCodester Music Gallery Site

CVE-2024-8345

What is CVE-2024-8345?

A critical vulnerability has been identified in SourceCodester's Music Gallery Site version 1.0, specifically affecting the functionality located in the file /classes/Users.php?f=delete. This security flaw allows remote attackers to manipulate the 'id' argument, thereby executing unauthorized SQL queries through SQL injection techniques. The publicly disclosed exploit poses significant risks as it could lead to unauthorized access to sensitive data or execution of arbitrary commands within the database. It is essential for users of this software to take immediate action to mitigate the risks associated with this vulnerability.

References