CVE-2024-10338

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/home.php. The manipulation of the argument view/view1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
SourceCodeHeroClothes Recommendation System1.0
sourcecodeheroclothes_recommendation_system1.0

References

Timeline

Published
Oct 24, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-10349.8A vulnerability, which was classified as critical, was found in openBI up to 1.0.8. This affects the function uploadFile of the file /applicCVE-2024-103406.4The Shortcodes Blocks Creator Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'scu' shortcode in versions up CVE-2024-103416.5The League of Legends Shortcodes plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and incluCVE-2024-103425.4The League of Legends Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and incCVE-2024-103436.4The Beek Widget Extention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including,CVE-2024-103448.7In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the refuse function was identified. Reported CVE-2024-103458.7In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. ReporteCVE-2024-103485.4A vulnerability was found in SourceCodester Best House Rental Management System 1.0. It has been classified as problematic. This affects an CVE-2024-103499.8A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. Affected by this issue is thCVE-2024-10359.8A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function uploadIcon of the fCVE-2024-103509.8A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknCVE-2024-103518.8A vulnerability was found in Tenda RX9 Pro 22.03.02.20. It has been rated as critical. This issue affects the function sub_424CE0 of the fil