SQL Injection Vulnerability in SourceCodester Employee and Visitor Gate Pass Logging System

CVE-2024-9315

Summary

A significant security flaw has been identified in the SourceCodester Employee and Visitor Gate Pass Logging System version 1.0. The issue arises from improper handling of inputs in the /admin/maintenance/manage_department.php file, leading to a SQL injection vulnerability when the 'id' argument is manipulated. This type of vulnerability can allow attackers to execute arbitrary SQL queries, potentially compromising sensitive data or gaining unauthorized access to the database. Given that the exploit can be initiated remotely, it poses a serious risk for organizations utilizing this system. Public disclosure of the exploit means it could be readily available for malicious actors, emphasizing the importance of immediate mitigation measures.

References