CVE-2024-40443

SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to cause a denial of service via the delete_users function in the Useres.php

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS

0.77% chance of exploitation in the next 30 days, 53th percentile

Published

2024-11-13

Updated

2025-03-13

Proof-of-concept exploits (1)

• Yuma-Tsushima07/CVE-2024-404430★ · 2024-11-10

References

• CVE Record
• NVD entry

Related

• CVE-2023-26035
• CVE-2024-3094
• CVE-2024-40433
• CVE-2024-40445
• CVE-2024-40431
• CVE-2024-40446