CVE-2024-51030

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and potential compromise of sensitive data within the database.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Nov 8, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-510315.4A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows remote authenticated use CVE-2024-510325.4A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authentica CVE-2024-510375.3An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password res CVE-2024-51048.8A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issu CVE-2024-51058.8A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown CVE-2024-510519.8AVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account.CVE-2024-510539.8An arbitrary file upload vulnerability in the component /main/fileupload.php of AVSCMS v8.2.0 allows attackers to execute arbitrary code via CVE-2024-510544.8A Cross Site Scriptng (XSS) vulnerability was found in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System 1.0, which a CVE-2024-510556.5An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component.CVE-2024-510586.2Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read arbitrary files from CVE-2024-51068.8A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects un CVE-2024-510609.1Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'a_id' parameter.