CVE-2024-40402

A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attackers to inject malicious SQL queries.

Score

CVSS 3.1 6.3 Medium

Status

Analyzed - cve@mitre.org

Published

2024-07-17

Last modified

2024-08-02

Weaknesses

CWE-89

Affected products

• Simple Library Management System (Nikhil-bhalerao)
• Simple Library Management System (Sourcecodester)

References

• https://github.com/CveSecLook/cve/issues/49