VulnerabilityAnalyzed
CVE-2024-5098
A vulnerability has been found in SourceCodester Simple Inventory System 1.0 and classified as critical.
MEDIUM 5.1EPSS 0.48%
Does this matter?
Lower severity and a low EPSS score (0.48%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability has been found in SourceCodester Simple Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-265081 was assigned to this vulnerability.
- CVSS 4.0
- 5.1 MEDIUMCVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.48% probability · 40th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- argie/simple inventory system
- Source
- cna@vuldb.com
References
- https://github.com/rockersiyuan/CVE/blob/main/SourceCodester%20Simple%20Inventory%20System%20Sql%20Inject-1.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.265081Permissions Required, VDB Entry
- https://vuldb.com/?id.265081Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.337056Third Party Advisory, VDB Entry
- https://github.com/rockersiyuan/CVE/blob/main/SourceCodester%20Simple%20Inventory%20System%20Sql%20Inject-1.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.265081Permissions Required, VDB Entry
- https://vuldb.com/?id.265081Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.337056Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.