CVE-2024-9318

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in SourceCodester Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file /control/activate.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Advocate Office Management System	1.0
sourcecodester	advocate_office_management_system	1.0

References

https://github.com/para-paradise/webray.com.cn/blob/main/Advocate%20office%20management%20system/Advocate%20office%20management%20system%20activate.php%20error-based%20SQL%20Injection%20Vulnerability.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.278822Permissions Required, Third Party Advisory
https://vuldb.com/?id.278822Third Party Advisory
https://vuldb.com/?submit.412749Third Party Advisory
https://www.sourcecodester.com/Product

Timeline

Published: Sep 28, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-93198.8A vulnerability, which was classified as critical, was found in SourceCodester Online Timesheet App 1.0. This affects an unknown part of the CVE-2024-93205.4A vulnerability has been found in SourceCodester Online Timesheet App 1.0 and classified as problematic. This vulnerability affects unknown CVE-2024-93215.3A vulnerability was found in SourceCodester Online Railway Reservation System 1.0 and classified as critical. This issue affects some unknow CVE-2024-93229.8A vulnerability was found in code-projects Supply Chain Management 1.0. It has been classified as critical. Affected is an unknown function CVE-2024-93235.4A vulnerability was found in SourceCodester Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerabi CVE-2024-93248.8A vulnerability was found in Intelbras InControl up to 2.21.57. It has been rated as critical. Affected by this issue is some unknown functi CVE-2024-93257.8A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This affects an unknown part of the file C:\Prog CVE-2024-93269.8A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the fi CVE-2024-93279.8A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. This vulnerability affects unknown code CVE-2024-93289.8A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This issue affects some un CVE-2024-93296.1In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when CVE-2024-93335.3Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents vi