A vulnerability, which was classified as critical, has been found in SourceCodester Best Employee Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/fetch_product_details.php. The manipulation of the argument barcode leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
History

Tue, 19 Nov 2024 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Mayurik
Mayurik best Employee Management System
CPEs cpe:2.3:a:mayurik:best_employee_management_system:1.0:*:*:*:*:*:*:*
Vendors & Products Mayurik
Mayurik best Employee Management System

Thu, 14 Nov 2024 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Sourcecodester
Sourcecodester best Employee Management System
CPEs cpe:2.3:a:sourcecodester:best_employee_management_system:*:*:*:*:*:*:*:*
Vendors & Products Sourcecodester
Sourcecodester best Employee Management System
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 14 Nov 2024 15:15:00 +0000

Type Values Removed Values Added
Description A vulnerability, which was classified as critical, has been found in SourceCodester Best Employee Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/fetch_product_details.php. The manipulation of the argument barcode leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Title SourceCodester Best Employee Management System fetch_product_details.php sql injection
Weaknesses CWE-74
CWE-89
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2024-11-14T15:00:12.619Z

Updated: 2024-11-14T16:10:29.491Z

Reserved: 2024-11-14T08:09:08.849Z

Link: CVE-2024-11212

cve-icon Vulnrichment

Updated: 2024-11-14T16:10:19.533Z

cve-icon NVD

Status : Analyzed

Published: 2024-11-14T15:15:08.360

Modified: 2024-11-19T15:48:22.163

Link: CVE-2024-11212

cve-icon Redhat

No data.