CVE-2024-3438

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Prison Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /Admin/login.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259691.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Prison Management System	1.0
sourcecodester	prison_management_system	1.0

References

https://github.com/fubxx/CVE/blob/main/PrisonManagementSystemSQL1.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.259691Permissions Required, VDB Entry
https://vuldb.com/?id.259691Third Party Advisory, VDB Entry
https://vuldb.com/?submit.312203Third Party Advisory, VDB Entry
https://github.com/fubxx/CVE/blob/main/PrisonManagementSystemSQL1.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.259691Permissions Required, VDB Entry
https://vuldb.com/?id.259691Third Party Advisory, VDB Entry
https://vuldb.com/?submit.312203Third Party Advisory, VDB Entry

Timeline

Published: Apr 8, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-343806.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud Conversational Forms for CVE-2024-343815.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PropertyHive allows Stored XSS.This is CVE-2024-343825.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in RoboSoft Robo Gallery.This issue affects Robo Gallery: from n/a CVE-2024-343835.3Authorization Bypass Through User-Controlled Key vulnerability in The SEO Guys at SEOPress SEOPress.This issue affects SEOPress: from n/a th CVE-2024-343848.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SinaExtra Sina Extension for Elementor allow CVE-2024-343855.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Wishlist yit CVE-2024-343867.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lucian Apostol Auto Affiliate Links.Th CVE-2024-343874.3Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a through 3.6.4.CVE-2024-343887.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Scribit GDPR Compliance.This issue affects GDPR Compliance: from CVE-2024-343894.3Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a through 3.6.4.CVE-2024-34399.8A vulnerability was found in SourceCodester Prison Management System 1.0. It has been classified as critical. Affected is an unknown functio CVE-2024-343906.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AddonMaster Post Grid Master allows St