PT-2024-38955 · Sourcecodester · Sourcecodester Electric Billing Management System
Xmg404
·
Published
2024-08-30
·
Updated
2024-09-04
·
CVE-2024-8340
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
SourceCodester Electric Billing Management System version 1.0
Description:
A critical vulnerability has been found in the SourceCodester Electric Billing Management System. This issue affects the file /Actions.php?a=login, where the manipulation of the
username argument leads to SQL injection. The attack can be initiated remotely.Recommendations:
For SourceCodester Electric Billing Management System version 1.0, patch immediately and validate input sanitization to prevent SQL injection attacks. As a temporary workaround, consider restricting access to the /Actions.php?a=login endpoint until a patch is available. Avoid using the
username argument in the affected endpoint until the issue is resolved.Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sourcecodester Electric Billing Management System