CVE-2024-1833
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Feb 23, 2024
Updated: May 17, 2024
CWE ID 89
Summary
CVE-2024-1833 is a critical vulnerability affecting SourceCodester Employee Management System 1.0. The issue lies within the /Account/login.php file, where an sql injection vulnerability can be exploited through manipulation of the txtusername argument. This vulnerability can be exploited remotely, and the exploit has been made public, increasing the risk for potential attacks. The exact functionality that is affected remains unknown, but the consequences could be significant.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share