Lucene search

VulDBCVE-2024-5384

HistoryMay 27, 2024 - 12:15 a.m.

CVE-2024-5384

2024-05-2700:15:09

CWE-89

VulDB

web.nvd.nist.gov

critical

sql injection

remote attack

index.php

vdb-266302

cve-2024-5384

sourcecodester

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CVSS4

6.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/SC:N/VI:L/SI:N/VA:L/SA:N

AI Score

7.6

Confidence

Low

EPSS

Percentile

15.5%

JSON

A vulnerability classified as critical was found in SourceCodester Facebook News Feed Like 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to sql injection. The attack can be initiated remotely. VDB-266302 is the identifier assigned to this vulnerability.

Affected configurations

Vulners

Node

sourcecodesterfacebook_news_feed_likeMatch1.0

VendorProductVersionCPE
sourcecodesterfacebook_news_feed_like1.0cpe:2.3:a:sourcecodester:facebook_news_feed_like:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sourcecodester	facebook_news_feed_like	1.0	cpe:2.3:a:sourcecodester:facebook_news_feed_like:1.0:::::::*

CNA Affected

[
  {
    "vendor": "SourceCodester",
    "product": "Facebook News Feed Like",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

References

vuldb.com/?ctiid.266302

vuldb.com/?id.266302

vuldb.com/?submit.344502

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CVSS4

6.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/SC:N/VI:L/SI:N/VA:L/SA:N

AI Score

7.6

Confidence

Low

EPSS

Percentile

15.5%

JSON

Related for CVE-2024-5384