CVE-2024-7949

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetch_genderit.php. The manipulation of the argument request leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Aug 20, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-79509.8The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Local File Inclusio CVE-2024-79528.7A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can CVE-2024-79538.7A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If explo CVE-2024-79549.8The porte_plume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A rem CVE-2024-79554.8The Starbox WordPress plugin before 3.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as CVE-2024-79567.6A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability CVE-2024-79579.1An arbitrary file overwrite vulnerability exists in the ZulipConnector of danswer-ai/danswer, affecting the latest version. The vulnerabilit CVE-2024-79609.1The Rockwell Automation affected product contains a vulnerability that allows a threat actor to view sensitive information and change settin CVE-2024-79619.8A path traversal vulnerability exists in the Rockwell Automation affected product. If exploited, the threat actor could upload arbitrary fi CVE-2024-79627.5An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading promp CVE-2024-79636.4The CMSMasters Content Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's multiple shortcodes in al CVE-2024-79648.8Use after free in Passwords in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corrupt