CVE-2024-7190

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical was found in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/get_price.php. The manipulation of the argument expenses_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272611.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jul 29, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-71919.8A vulnerability, which was classified as critical, has been found in itsourcecode Society Management System 1.0. Affected by this issue is sCVE-2024-71928.8A vulnerability, which was classified as critical, was found in itsourcecode Society Management System 1.0. This affects an unknown part of CVE-2024-71937.8A vulnerability has been found in Mp3tag up to 3.26d and classified as problematic. This vulnerability affects unknown code in the library tCVE-2024-71948.8A vulnerability was found in itsourcecode Society Management System 1.0 and classified as critical. This issue affects some unknown processiCVE-2024-71959.8A vulnerability was found in itsourcecode Society Management System 1.0. It has been classified as critical. Affected is an unknown functionCVE-2024-71969.8A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been declared as critical. Affected by this vulnCVE-2024-71978.8A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been rated as critical. Affected by this issue iCVE-2024-71988.8A vulnerability classified as critical has been found in SourceCodester Complaints Report Management System 1.0. This affects an unknown parCVE-2024-71998.8A vulnerability classified as critical was found in SourceCodester Complaints Report Management System 1.0. This vulnerability affects unknoCVE-2024-72005.4A vulnerability, which was classified as problematic, has been found in SourceCodester Complaints Report Management System 1.0. This issue aCVE-2024-72019.8The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated reCVE-2024-72029.8The query functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated re
CVE-2024-7190: Critical severity, CVSS 9.8 | Vulnix