CVE-2024-9317

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is the function delete_category of the file /classes/Master.php?f=delete_category. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Online Eyewear Shop	1.0
sourcecodester	online_eyewear_shop	1.0

References

https://github.com/o0wll/cve/blob/main/sql.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.278821Permissions Required, Third Party Advisory
https://vuldb.com/?id.278821Third Party Advisory
https://vuldb.com/?submit.412748Third Party Advisory
https://www.sourcecodester.com/Product

Timeline

Published: Sep 28, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-93189.8A vulnerability, which was classified as critical, has been found in SourceCodester Advocate Office Management System 1.0. Affected by this CVE-2024-93198.8A vulnerability, which was classified as critical, was found in SourceCodester Online Timesheet App 1.0. This affects an unknown part of the CVE-2024-93205.4A vulnerability has been found in SourceCodester Online Timesheet App 1.0 and classified as problematic. This vulnerability affects unknown CVE-2024-93215.3A vulnerability was found in SourceCodester Online Railway Reservation System 1.0 and classified as critical. This issue affects some unknow CVE-2024-93229.8A vulnerability was found in code-projects Supply Chain Management 1.0. It has been classified as critical. Affected is an unknown function CVE-2024-93235.4A vulnerability was found in SourceCodester Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerabi CVE-2024-93248.8A vulnerability was found in Intelbras InControl up to 2.21.57. It has been rated as critical. Affected by this issue is some unknown functi CVE-2024-93257.8A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This affects an unknown part of the file C:\Prog CVE-2024-93269.8A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the fi CVE-2024-93279.8A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. This vulnerability affects unknown code CVE-2024-93289.8A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This issue affects some un CVE-2024-93296.1In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when