CVE-2024-34480

An attacker sends a specially crafted HTTP request to the admin/category/view_category.php endpoint, placing a malicious SQL payload in the 'id' parameter. The application does not properly validate or filter input data before passing it to the database query, which allows manipulation of the executed SQL query logic. Due to the network vector (AV:N), lack of authentication requirement (PR:N), and lack of user interaction (UI:N), the attack can be conducted remotely and fully automatically.

An attacker can gain unauthorized access to data stored in the database, modify or delete data, and in certain database server configurations potentially execute system commands — which means complete loss of data confidentiality, integrity, and availability.

Apply patches available from the vendor according to references. Additionally, it is recommended to implement parameterized queries (prepared statements) in the application code and restrict access to the administrative panel exclusively to trusted IP addresses.

SourceCodester Computer Laboratory Management System version 1.0