CVE-2024-7306

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in SourceCodester Establishment Billing Management System 1.0. Affected is an unknown function of the file /manage_block.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-273198 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
SourceCodesterEstablishment Billing Management System1.0
sourcecodesterestablishment_billing_management_system1.0

References

Timeline

Published
Jul 31, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-73078.8A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this vuCVE-2024-73088.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this issue iCVE-2024-73095.4A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. This affects an unknown parCVE-2024-73106.1A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as problematic. This vulnerability affects unCVE-2024-73119.8A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been rated as critical. This issue affects some unknown pCVE-2024-73126.1URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server (REST Management Interface modules) allowCVE-2024-73136.1The Shield Security WordPress plugin before 20.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading CVE-2024-73149.8anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append ";swagger-ui" toCVE-2024-73157.5The Migration, Backup, Staging WordPress plugin before 0.9.106 does not use sufficient randomness in the filename that is created when geneCVE-2024-73165.9Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker CVE-2024-73175.4The Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager plugin for WordPress is vulnerable to Stored CrCVE-2024-73184.8A vulnerability was found in Keycloak. Expired OTP codes are still usable when using FreeOTP when the OTP token period is set to 30 seconds