CVE-2024-3419

A vulnerability has been found in SourceCodester Online Courseware 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/edit.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259591.
References
Link Resource
https://github.com/thisissuperann/Vul/blob/Online-Courseware/Online-Courseware-04.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.259591 Permissions Required
https://vuldb.com/?id.259591 Permissions Required VDB Entry
https://vuldb.com/?submit.311597 Third Party Advisory VDB Entry
https://github.com/thisissuperann/Vul/blob/Online-Courseware/Online-Courseware-04.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.259591 Permissions Required
https://vuldb.com/?id.259591 Third Party Advisory VDB Entry
https://vuldb.com/?submit.311597 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:argie:online_courseware:1.0:*:*:*:*:*:*:*

History

17 Jan 2025, 15:35

Type Values Removed Values Added
First Time Argie online Courseware
Argie
CPE cpe:2.3:a:argie:online_courseware:1.0:*:*:*:*:*:*:*
References () https://github.com/thisissuperann/Vul/blob/Online-Courseware/Online-Courseware-04.md - () https://github.com/thisissuperann/Vul/blob/Online-Courseware/Online-Courseware-04.md - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.259591 - () https://vuldb.com/?ctiid.259591 - Permissions Required
References () https://vuldb.com/?id.259591 - () https://vuldb.com/?id.259591 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.311597 - () https://vuldb.com/?submit.311597 - Third Party Advisory, VDB Entry

Information

Published : 2024-04-07 10:15

Updated : 2025-01-17 15:35


NVD link : CVE-2024-3419

Mitre link : CVE-2024-3419

CVE.ORG link : CVE-2024-3419


JSON object : View

Products Affected

argie

  • online_courseware
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')