CVE-2024-1878

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /myprofile.php. The manipulation of the argument id with the input 1%20or%201=1 leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-254726 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Feb 26, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-18798.8A Cross-Site Request Forgery (CSRF) vulnerability in significant-gravitas/autogpt version v0.5.0 allows attackers to execute arbitrary comma CVE-2024-18807.8An OS command injection vulnerability exists in the MacOS Text-To-Speech class MacOSTTS of the significant-gravitas/autogpt project, affecti CVE-2024-18819.8AutoGPT, a component of significant-gravitas/autogpt, is vulnerable to an improper neutralization of special elements used in an OS command CVE-2024-18827.2This vulnerability allows an already authenticated admin user to create a malicious payload that could be leveraged for remote code executio CVE-2024-18836.1This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by cr CVE-2024-18846.5This is a Server-Side Request Forgery (SSRF) vulnerability in the PaperCut NG/MF server-side module that allows an attacker to induce the s CVE-2024-18859.8This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage.CVE-2024-18868.8This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.CVE-2024-18874.3Mattermost fails to check if compliance export is enabled when fetching posts of public channels allowing a user that is not a member of the CVE-2024-18884.3Mattermost fails to check the "invite_guest" permission when inviting guests of other teams to a team, allowing a member with permissions to CVE-2024-18898.8Cross-Site Request Forgery vulnerability in SMA Cluster Controller, affecting version 01.05.01.R. This vulnerability could allow an attacker CVE-2024-18905.4Vulnerability whereby an attacker could send a malicious link to an authenticated operator, which could allow remote attackers to perform a