CVE-2024-8340

Name of the Vulnerable Software and Affected Versions: SourceCodester Electric Billing Management System version 1.0

Description: A critical vulnerability has been found in the SourceCodester Electric Billing Management System. This issue affects the file /Actions.php?a=login, where the manipulation of the username argument leads to SQL injection. The attack can be initiated remotely.

Recommendations: For SourceCodester Electric Billing Management System version 1.0, patch immediately and validate input sanitization to prevent SQL injection attacks. As a temporary workaround, consider restricting access to the /Actions.php?a=login endpoint until a patch is available. Avoid using the username argument in the affected endpoint until the issue is resolved.