PT-2024-36491 · Unknown · Itsourcode Learning Management System

N3Xu5Cr4Ck37 · Published 2024-05-30 · Updated 2025-02-11 · CVE-2024-5519

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ItsourceCode Learning Management System Project In PHP version 1.0

Description A critical vulnerability was found in the ItsourceCode Learning Management System Project In PHP. This issue affects the file login.php and is related to the manipulation of the user email argument, leading to SQL injection. The attack can be initiated remotely.

Recommendations For ItsourceCode Learning Management System Project In PHP version 1.0, consider disabling the login.php file or restricting access to it until a patch is available. Avoid using the user email argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-5519

Affected Products

Itsourcode Learning Management System

References · 8

• 🔥 https://github.com/L1OudFd8cl09/CVE/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-5519 · Security Note
• https://osv.dev/vulnerability/CVE-2024-5519 · Vendor Advisory
• https://vuldb.com/?id.266590 · Note
• https://twitter.com/cracbot/status/1797870954280067075 · Twitter Post
• https://vuldb.com/?ctiid.266590 · Note
• https://t.me/cvenotify/110803 · Telegram Post
• https://vuldb.com/?submit.346310 · Note