CVE-2024-7947

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Point of Sales and Inventory Management System	1.0
sourcecodester	point_of_sales_and_inventory_management_system	1.0

References

https://github.com/CveSecLook/cve/issues/60Exploit, Issue Tracking
https://vuldb.com/?ctiid.275139Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.275139Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?submit.393525Issue Tracking, Third Party Advisory, VDB Entry

Timeline

Published: Aug 20, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-79485.4A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of t CVE-2024-79498.8A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unkno CVE-2024-79509.8The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Local File Inclusio CVE-2024-79528.7A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can CVE-2024-79538.7A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If explo CVE-2024-79549.8The porte_plume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A rem CVE-2024-79554.8The Starbox WordPress plugin before 3.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as CVE-2024-79567.6A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability CVE-2024-79579.1An arbitrary file overwrite vulnerability exists in the ZulipConnector of danswer-ai/danswer, affecting the latest version. The vulnerabilit CVE-2024-79609.1The Rockwell Automation affected product contains a vulnerability that allows a threat actor to view sensitive information and change settin CVE-2024-79619.8A path traversal vulnerability exists in the Rockwell Automation affected product. If exploited, the threat actor could upload arbitrary fi CVE-2024-79627.5An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading promp