PT-2025-16785

CVE-2024-40068

·

Published

2025-04-16

·

Updated

2025-04-20

Description by

CVSS 3.1
5.9
Medium
MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Sourcecodester Online ID Generator System version 1.0
Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/id generator/admin/?page=templates/manage template&id=1" endpoint.
Recommendations For version 1.0, consider restricting access to the vulnerable endpoint "/id generator/admin/?page=templates/manage template&id=1" to minimize the risk of exploitation. Avoid using the id parameter in the affected endpoint until the issue is resolved.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾