Description
https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code (remote). The component is: control/activate_case.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activate_case.php in parameter id endpoint of Advocate office management system. Unsanitized user input in the specified parameter is interpolated directly into an SQL query, allowing attackers to infer or extract data and, in some cases, execute stacked/time-based payloads. ¶¶ Affected Component & Parameter Affected Endpoint URL: http://localhost/advocate/kortex_lite/control/activate_case.php?id=1 HTTP Method: GET Vulnerable File: activate_case.php Parameter: id Vector Location: GET Injection Techniques (as identified by sqlmap) Type: error-based Title: MySQL >= 5.1 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (EXTRACTVALUE) Payload: id=1 AND EXTRACTVALUE(6268,CONCAT(0x5c,0x71766b6a71,(SELECT (ELT(6268=6268,1))),0x716a7a6b71)) Type: time-based blind Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP) Payload: id=1 AND (SELECT 4464 FROM (SELECT(SLEEP(5)))aHqo) Proof of Concept (Burp Repeater)
Published: 2026-07-29
Score: 7.3 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a classic SQL injection flaw in the GET parameter 'id' of the activate_case.php script, which is incorporated into a MySQL statement without sanitization. This allows an attacker to inject and execute arbitrary SQL code. If the database credentials used by the application have sufficient privileges, the injected payload can result in remote code execution on the underlying server, making the flaw potentially severe. The weakness is classifiable as CWE‑89 (SQL Injection).

Affected Systems

The vulnerable component is part of the freely distributed Advocate Office Management System version 1.0. The attack surface is the control/activate_case.php file that processes the 'id' query parameter. No vendor patch level or higher version information is listed; the application appears to be a standalone system without a CNA listed for this release.

Risk and Exploitability

The CVSS score of 7.3 indicates high severity, while the EPSS score of less than 1% shows a very low current exploitation probability. The flaw is not in CISA’s KEV catalogue. Because the parameter is exposed through a public GET endpoint, an attacker can send a crafted HTTP request from any external host that can reach the web server to trigger the injection, read or manipulate data, and potentially execute server‑side code if database permissions allow.

Generated by OpenCVE AI on August 4, 2026 at 12:43 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest vendor update of Advocate Office Management System that patches the SQL injection in activate_case.php.
  • If no update is currently available, modify the application code to bind the 'id' parameter using a prepared statement or otherwise escape it before including it in the SQL query.
  • Limit the database user privileges to only the permissions necessary for the application to function, so that even if injection is successful, the scope of damage is minimized.
  • Add input validation to ensure the 'id' parameter contains only numeric characters before using it in the database query.

Generated by OpenCVE AI on August 4, 2026 at 12:43 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 04 Aug 2026 13:00:00 +0000

Type Values Removed Values Added
Title SQL Injection in Advocate Office Management System 1.0 Allowing Remote Code Execution

Sat, 01 Aug 2026 00:45:00 +0000

Type Values Removed Values Added
Title SQL Injection in Advocate Office Management System 1.0 Allowing Remote Code Execution

Thu, 30 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Mayurik
Mayurik advocate Office Management System
Vendors & Products Mayurik
Mayurik advocate Office Management System

Thu, 30 Jul 2026 14:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-89
Metrics cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 29 Jul 2026 22:15:00 +0000

Type Values Removed Values Added
Description https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code (remote). The component is: control/activate_case.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activate_case.php in parameter id endpoint of Advocate office management system. Unsanitized user input in the specified parameter is interpolated directly into an SQL query, allowing attackers to infer or extract data and, in some cases, execute stacked/time-based payloads. ¶¶ Affected Component & Parameter Affected Endpoint URL: http://localhost/advocate/kortex_lite/control/activate_case.php?id=1 HTTP Method: GET Vulnerable File: activate_case.php Parameter: id Vector Location: GET Injection Techniques (as identified by sqlmap) Type: error-based Title: MySQL >= 5.1 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (EXTRACTVALUE) Payload: id=1 AND EXTRACTVALUE(6268,CONCAT(0x5c,0x71766b6a71,(SELECT (ELT(6268=6268,1))),0x716a7a6b71)) Type: time-based blind Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP) Payload: id=1 AND (SELECT 4464 FROM (SELECT(SLEEP(5)))aHqo) Proof of Concept (Burp Repeater)
References

Subscriptions

Mayurik Advocate Office Management System
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-07-30T13:32:40.765Z

Reserved: 2025-12-08T00:00:00.000Z

Link: CVE-2025-67406

cve-icon Vulnrichment

Updated: 2026-07-30T13:32:16.294Z

cve-icon NVD

Status : Deferred

Published: 2026-07-29T22:16:51.393

Modified: 2026-07-30T14:16:44.050

Link: CVE-2025-67406

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T12:45:05Z

Weaknesses
  • CWE-89

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')