First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-44739

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manage_user&id=.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
sourcecodester	simple_forum_website	1.0

References

https://github.com/zach341/Cve_report/blob/main/simple-forum-website/SQLi-1.mdExploit, Third Party Advisory

Timeline

Published: Sep 6, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-44744.3The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to CVE-2024-447445.7An issue in Malwarebytes Premium Security v5.0.0.883 allows attackers to execute arbitrary code via placing crafted binaries into unspecifie CVE-2024-44754.3The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check when clearing logs, which could allow attackers to make a logged in CVE-2024-447546.8Cryptographic key extraction from internal flash in Minut M2 with firmware version #15142 allows physically proximate attackers to inject mo CVE-2024-447569.8NUS-M9 ERP Management Software v3.0.0 was discovered to contain a SQL injection vulnerability via the usercode parameter at /UserWH/checkLog CVE-2024-447577.5An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers CVE-2024-447589.8An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to CVE-2024-447597.5An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to dow CVE-2024-447607.5Incorrect access control in the component /servlet/SnoopServlet of Shenzhou News Union Enterprise Management System v5.0 through v18.8 allow CVE-2024-447619.8An issue in EQ Enterprise Management System before v2.0.0 allows attackers to execute a directory traversal via crafted requests.CVE-2024-447625.3A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.CVE-2024-447656.5An Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH CloudPanel v2.0.0 to v2.4.2 allows low-privil

CVE-2024-44739: High severity, CVSS 8.8 | Vulnix