CVE-2024-10337

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is an unknown function of the file /admin/home.php?con=add. The manipulation of the argument cat/subcat/ t1/t2/text leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodeHero	Clothes Recommendation System	1.0
sourcecodehero	clothes_recommendation_system	1.0

References

https://vuldb.com/?ctiid.281682Permissions Required
https://vuldb.com/?id.281682Permissions Required
https://vuldb.com/?submit.427443Exploit, Third Party Advisory

Timeline

Published: Oct 24, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-103387.2A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this vulnerability is an u CVE-2024-10349.8A vulnerability, which was classified as critical, was found in openBI up to 1.0.8. This affects the function uploadFile of the file /applic CVE-2024-103406.4The Shortcodes Blocks Creator Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'scu' shortcode in versions up CVE-2024-103416.5The League of Legends Shortcodes plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and inclu CVE-2024-103425.4The League of Legends Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and inc CVE-2024-103436.4The Beek Widget Extention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including,CVE-2024-103448.7In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the refuse function was identified. Reported CVE-2024-103458.7In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reporte CVE-2024-103485.4A vulnerability was found in SourceCodester Best House Rental Management System 1.0. It has been classified as problematic. This affects an CVE-2024-103499.8A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. Affected by this issue is th CVE-2024-10359.8A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function uploadIcon of the f CVE-2024-103509.8A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unkn