PT-2024-28829 · Unknown · Sourcecodester Library Management System
CVSS v3.1
6.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Sourcecodester Simple Library Management System version 1.0
Description
A SQL injection issue was discovered due to insufficient validation of user input for the
username parameter in the "ajax.php" file. This allows attackers to inject malicious SQL queries.Recommendations
For Sourcecodester Simple Library Management System version 1.0, consider validating and sanitizing the
username parameter to prevent malicious SQL injections. As a temporary workaround, restrict access to the "ajax.php" file until a proper fix is applied.Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sourcecodester Library Management System