CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-9318

Critical Severity
Mayurik
SVRS
84/100

CVSSv3
9.8/10

EPSS
0.00064/1

CVE-2024-9318: SQL Injection vulnerability in SourceCodester Advocate Office Management System 1.0. This critical vulnerability allows for remote SQL injection attacks.

CVE-2024-9318 affects the /control/activate.php file of SourceCodester Advocate Office Management System 1.0, enabling attackers to manipulate the 'id' argument to inject malicious SQL code. With a SOCRadar Vulnerability Risk Score (SVRS) of 84, this vulnerability demands immediate attention due to its high risk level. The exploit is publicly available and actively being used in the wild, increasing the likelihood of successful attacks. Successful exploitation could lead to unauthorized data access, modification, or complete system compromise. The high CVSS score of 9.8 further underscores the severity of this threat, making patching or mitigation a top priority. Businesses using the affected system should take immediate action to secure their systems against potential attacks.

In The Wild
CVSS:3.1
AV:N
AC:L
PR:N
UI:N
S:U
C:H
I:H
A:H
2024-09-28

2024-10-01

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

CVE-2024-9318 | SourceCodester Advocate Office Management System 1.0 /control/activate.php id sql injection
vuldb.com2024-09-28
CVE-2024-9318 | SourceCodester Advocate Office Management System 1.0 /control/activate.php id sql injection | A vulnerability, which was classified as critical, has been found in SourceCodester Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file /control/activate.php. The manipulation of the argument id leads to sql injection. This vulnerability is handled as CVE-2024-9318<
cve-2024-9318
domains
urls
cves

Social Media

CVE-2024-9318 (CVSS:9.8, CRITICAL) is Analyzed. A vulnerability, which was classified as critical, has been found in SourceCodester Advocate Office Management System 1...https://t.co/Wgz5r1l385 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
0
0
0
CVE-2024-9318 A vulnerability, which was classified as critical, has been found in SourceCodester Advocate Office Management System 1.0. Affected by this issue is some unknown functi… https://t.co/7IXXclOjhH
0
0
0

Affected Software

Configuration 1
TypeVendorProduct
AppMayurikadvocate_office_management_system

References

ReferenceLink
[email protected]https://github.com/para-paradise/webray.com.cn/blob/main/Advocate%20office%20management%20system/Advocate%20office%20management%20system%20activate.php%20error-based%20SQL%20Injection%20Vulnerability.md
[email protected]https://vuldb.com/?ctiid.278822
[email protected]https://vuldb.com/?id.278822
[email protected]https://vuldb.com/?submit.412749
[email protected]https://www.sourcecodester.com/
GITHUBhttps://github.com/para-paradise/webray.com.cn/blob/main/Advocate%20office%20management%20system/Advocate%20office%20management%20system%20activate.php%20error-based%20SQL%20Injection%20Vulnerability.md

CWE Details

CWE IDCWE NameDescription
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence