CVE-2024-3439

Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0

Description A critical issue has been found, allowing for sql injection through an unknown function of the file /Account/login.php. This can be exploited remotely. The issue has been publicly disclosed and may be used for attacks.

Recommendations For SourceCodester Prison Management System version 1.0, as a temporary workaround, consider restricting access to the /Account/login.php file until a patch is available. Avoid using this file for login operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.