CVE-2024-3466

low-risk
Published 2024-04-08

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. Affected by this vulnerability is the function laporan_filter of the file /application/controller/Pengeluaran.php. The manipulation of the argument dari/sampai leads to sql injection. The associated identifier of this vulnerability is VDB-259747.

Do I need to act?

-
0.05% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
ADJACENT_NETWORK / LOW complexity

Affected Products (1)

Laundry Shop Management System

Affected Vendors

Oretnom23

References (8)

Exploit https://github.com/fubxx/CVE/blob/main/LaundryManagementSystemSQL4.md
Permissions Required https://vuldb.com/?ctiid.259747
Third Party Advisory https://vuldb.com/?id.259747
Third Party Advisory https://vuldb.com/?submit.312314
Exploit https://github.com/fubxx/CVE/blob/main/LaundryManagementSystemSQL4.md
Permissions Required https://vuldb.com/?ctiid.259747
Third Party Advisory https://vuldb.com/?id.259747
Third Party Advisory https://vuldb.com/?submit.312314
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal