CVE-2024-5895

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This issue affects the function delete_users of the file /classes/Users.php?f=delete. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268139.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Employee and Visitor Gate Pass Logging System	1.0
sourcecodester	employee_visitor_gatepass_logging_system	1.0

References

https://github.com/Hefei-Coffee/cve/blob/main/sql11.mdExploit
https://vuldb.com/?ctiid.268139Permissions Required, Third Party Advisory
https://vuldb.com/?id.268139Third Party Advisory
https://vuldb.com/?submit.354915Third Party Advisory
https://github.com/Hefei-Coffee/cve/blob/main/sql11.mdExploit
https://vuldb.com/?ctiid.268139Permissions Required, Third Party Advisory
https://vuldb.com/?id.268139Third Party Advisory
https://vuldb.com/?submit.354915Third Party Advisory

Timeline

Published: Jun 12, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-58969.8A vulnerability, which was classified as critical, was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected i CVE-2024-58976.1A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected b CVE-2024-58989.8A vulnerability was found in itsourcecode Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown f CVE-2024-58993.3When Bazel Plugin in intellij imports a project (either using "import project" or "Auto import") the dialog for trusting the project is not CVE-2024-59015.4The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widget in all versions up CVE-2024-59026.1The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-CVE-2024-59054.4A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows us CVE-2024-59064.8A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/ed CVE-2024-59077.0A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute prog CVE-2024-59087.5A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalP CVE-2024-59095.5A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows us CVE-2024-59109.8Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attacke