CVE-2024-7668

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A vulnerability has been found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This vulnerability affects the function delete_package of the file Master.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Car Driving School Management System	1.0
sourcecodester	car_driving_school_management_system	1.0

References

https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-6.mdExploit
https://vuldb.com/?ctiid.274126Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.274126Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?submit.388772Third Party Advisory, VDB Entry

Timeline

Published: Aug 12, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-76695.3A vulnerability was found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This issue affects the func CVE-2024-76707.8A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor ca CVE-2024-76717.8A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A m CVE-2024-76727.8A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Autodesk Navisworks, may force an Out-of-Bounds Write vulnerabil CVE-2024-76737.8A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious a CVE-2024-76747.8A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious CVE-2024-76757.8A maliciously crafted DWF file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Use-After-Free. A malicious actor can leve CVE-2024-76765.3A vulnerability was found in Sourcecodester Car Driving School Management System 1.0. It has been classified as critical. Affected is the fu CVE-2024-76776.1A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. Affected by this CVE-2024-76786.1A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as problematic. Affected by this iss CVE-2024-76797.8In Progress Telerik UI for WinForms versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutrali CVE-2024-76809.8A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part