CVE-2024-7667

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in SourceCodester Car Driving School Management System 1.0. This affects the function delete_users of the file User.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Car Driving School Management System	1.0
sourcecodester	car_driving_school_management_system	1.0

References

https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-5.mdExploit
https://vuldb.com/?ctiid.274125Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.274125Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?submit.388771Third Party Advisory, VDB Entry

Timeline

Published: Aug 12, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-76685.3A vulnerability has been found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This vulnerability aff CVE-2024-76695.3A vulnerability was found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This issue affects the func CVE-2024-76707.8A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor ca CVE-2024-76717.8A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A m CVE-2024-76727.8A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Autodesk Navisworks, may force an Out-of-Bounds Write vulnerabil CVE-2024-76737.8A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious a CVE-2024-76747.8A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious CVE-2024-76757.8A maliciously crafted DWF file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Use-After-Free. A malicious actor can leve CVE-2024-76765.3A vulnerability was found in Sourcecodester Car Driving School Management System 1.0. It has been classified as critical. Affected is the fu CVE-2024-76776.1A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. Affected by this CVE-2024-76786.1A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as problematic. Affected by this iss CVE-2024-76797.8In Progress Telerik UI for WinForms versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutrali