CVE-2024-3424

SourceCodester Online Courseware 1.0 contains a SQL injection in admin/listscore.php via the title parameter. This enables remote exploitation and is supported by multiple sources (NVD, Red Hat, CVE lists) indicating a critical vulnerability with high impact on confidentiality, integrity, and ava...

CVE-2024-3424 SourceCodester Online Courseware listscore.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file admin/listscore.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...