CVE-2024-6802

Name of the Vulnerable Software and Affected Versions SourceCodester Computer Laboratory Management System version 1.0

Description A critical issue was found in the SourceCodester Computer Laboratory Management System. The problem is related to an unknown function of the file /lms/classes/Master.php?f=save record, where the manipulation of the id argument leads to sql injection. This issue can be exploited remotely.

Recommendations For version 1.0, consider restricting access to the /lms/classes/Master.php file to minimize the risk of exploitation, especially for the save record function, until a patch is available. Avoid using the id argument in the affected API endpoint until the issue is resolved.