CVE-2024-7198

NVD Published Date: July 29, 2024 at 12:15 PM

NVD Last Modified: August 12, 2024 at 02:36 PM

Download Patch

Vulnerability ID

CVE-2024-7198

Severity

HIGH

Severity Score

8.8

Summary

A vulnerability classified as critical has been found in SourceCodester Complaints Report Management System 1.0. This affects an unknown part of the file /admin/manage_station.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272619.

References

https://vuldb.com/?id.272619

https://vuldb.com/?ctiid.272619

https://vuldb.com/?submit.380420

https://gist.github.com/topsky979/424d2ac58623b0fb4d5232a4ecbe5110

Mitigation and Patches

Exploits

https://gist.github.com/topsky979/424d2ac58623b0fb4d5232a4ecbe5110

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE ID

CWE-89

Recent Publish

CVE-2024-7200

CVE-2024-6881

CVE-2024-7199

CVE-2024-6124

2024-07 Security Only Update for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 SP2 (KB5041027)

2024-07 Security Only Update for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 SP2 for x64 (KB5041027)

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions

CVE-2024-7198

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2024-7198

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action