CVE-2024-7638

SourceCodester Kortex Lite Advocate Office Management System delete_client.php sql injection

A vulnerability classified as critical has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the file delete_client.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected

SourceCodester · Kortex Lite Advocate Office Management System

CVSS v4.0 VULDB

5.3 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 VULDB

6.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CVSS v2.0 VULDB

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.95% chance of exploitation in the next 30 days, 61st percentile

Published

2024-08-09

Proof-of-concept exploits (1)

• samwbs/kortexcve/blob/main/sqli_delete_client/Kortex_sqli(delete_client.php).md1★ · 2024-09-13

Security advisories

• https://vuldb.com/?ctiid.274059
• https://vuldb.com/?id.274059
• https://vuldb.com/?submit.387266

References

• CVE Record
• NVD entry

Related

• CVE-2024-7639
• CVE-2024-7640
• CVE-2024-7641
• CVE-2024-7642
• CVE-2024-7683
• CVE-2024-7684