Upstream information
Description
A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part of the file remove_inbox_message.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240909 was assigned to this vulnerability.SUSE information
Overall state of this security issue: Does not affect SUSE products
This issue is currently rated as having critical severity.
National Vulnerability Database | |
---|---|
Base Score | 6.5 |
Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Access Vector | Network |
Access Complexity | Low |
Authentication | Single |
Confidentiality Impact | Partial |
Integrity Impact | Partial |
Availability Impact | Partial |
National Vulnerability Database | |
---|---|
Base Score | 9.8 |
Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Attack Vector | Network |
Attack Complexity | Low |
Privileges Required | None |
User Interaction | None |
Scope | Unchanged |
Confidentiality Impact | High |
Integrity Impact | High |
Availability Impact | High |
CVSSv3 Version | 3.1 |
SUSE Security Advisories:
- SUSE-SU-2024:2360-1, published Tue Jul 9 16:33:02 UTC 2024
- SUSE-SU-2024:2381-1, published Wed Jul 10 08:30:46 UTC 2024
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
SUSE Linux Enterprise Real Time 12 SP5 |
| Patchnames: SUSE-SLE-RT-12-SP5-2024-2381 |
SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 |
| Patchnames: SUSE-SLE-SERVER-12-SP5-2024-2360 |
List of packages in QA
Product(s) | Package(s) |
---|---|
SUSE Linux Enterprise High Availability Extension 12 SP5 |
|
SUSE Linux Enterprise Live Patching 12 SP5 |
|
SUSE Linux Enterprise Server 12 SP5 |
|
SUSE Linux Enterprise Server for SAP Applications 12 SP5 |
|
SUSE Linux Enterprise Software Development Kit 12 SP5 |
|
SUSE Linux Enterprise Server 12 SP5 |
|
SUSE Linux Enterprise Server for SAP Applications 12 SP5 |
|
SUSE Linux Enterprise Workstation Extension 12 SP5 |
|
SUSE Linux Enterprise Server 12 SP5 |
|
SUSE Linux Enterprise Server for SAP Applications 12 SP5 |
|
SUSE Timeline for this CVE
CVE page created: Fri Sep 29 22:00:47 2023CVE page last modified: Thu Jul 11 12:49:02 2024