CVE-2024-7281

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the file /admin/index.php?page=manage_lot. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-273150 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jul 31, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-72829.8A vulnerability classified as critical was found in SourceCodester Lot Reservation Management System 1.0. Affected by this vulnerability is CVE-2024-72838.8A vulnerability, which was classified as critical, has been found in SourceCodester Lot Reservation Management System 1.0. Affected by this CVE-2024-72845.4A vulnerability, which was classified as problematic, was found in SourceCodester Lot Reservation Management System 1.0. This affects an unkCVE-2024-72855.4A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as problematic. This vulnerabiliCVE-2024-72869.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. This issue affects some CVE-2024-72878.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been classified as critical. Affected is an CVE-2024-72888.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been declared as critical. Affected by this CVE-2024-72898.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been rated as critical. Affected by this issCVE-2024-72908.8A vulnerability classified as critical has been found in SourceCodester Establishment Billing Management System 1.0. This affects an unknownCVE-2024-72917.2The JetFormBuilder plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3.4.1. This is due to CVE-2024-72928.8In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restrCVE-2024-72938.8In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak passwo
CVE-2024-7281: Critical severity, CVSS 9.8 | Vulnix