CVE-2024-7810— SourceCodester Online Graduate Tracer System view_itprofile.php sql injection
Quick assessment
Affected
SourceCodester Online Graduate Tracer System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SourceCodester Online Graduate Tracer System是SourceCodester 的一个用PHP和MySQL数据库开发的基于Web的应用程序项目。它的主要目的是为某所学校提供一个平台来跟踪他们的校友并生成校友状态的图形报告。 SourceCodester Online Graduate Tracer System 1.0 版本存在SQL注入漏洞，该漏洞源于 /tracking/admin/view_itprofile.php 文件中的 id 参数包含一个 SQL 注入
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-7810
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SourceCodester Online Graduate Tracer System view_itprofile.php sql injection
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /tracking/admin/view_itprofile.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Vulnerability Title
SourceCodester Online Graduate Tracer System SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SourceCodester Online Graduate Tracer System是SourceCodester 的一个用PHP和MySQL数据库开发的基于Web的应用程序项目。它的主要目的是为某所学校提供一个平台来跟踪他们的校友并生成校友状态的图形报告。 SourceCodester Online Graduate Tracer System 1.0 版本存在SQL注入漏洞，该漏洞源于 /tracking/admin/view_itprofile.php 文件中的 id 参数包含一个 SQL 注入
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SourceCodester | Online Graduate Tracer System | 1.0 | - |
|
II. Public POCs for CVE-2024-7810
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-7810
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-7810 (3)
-
-
Submit #390782: sourcecodester Online Graduate Tracer System v1.0 SQL injection third-party-advisory
-
CVE-2024-7810 SourceCodester Online Graduate Tracer System view_itprofile.php sql injection vdb-entry technical-description
Other References for CVE-2024-7810 (1)
Same Patch Batch · SourceCodester · 2024-08-15 · 10 CVEs total
| CVE-2024-7811 | 6.3 MEDIUM | SourceCodester Daily Expenses Monitoring App delete-expense.php sql injection |
| CVE-2024-7841 | 6.3 MEDIUM | SourceCodester Clinics Patient Management System check_user_name.php sql injection |
| CVE-2024-7845 | 6.3 MEDIUM | SourceCodester Online Graduate Tracer System fetch_it.php sql injection |
| CVE-2024-7809 | 5.3 MEDIUM | SourceCodester Online Graduate Tracer System nbproject exposure of information through dir |
| CVE-2024-7813 | 5.3 MEDIUM | SourceCodester Prison Management System Profile Image insufficiently protected credentials |
| CVE-2024-7842 | 5.3 MEDIUM | SourceCodester Online Graduate Tracer System export_it.php information disclosure |
| CVE-2024-7843 | 5.3 MEDIUM | SourceCodester Online Graduate Tracer System exportcs.php information disclosure |
| CVE-2024-7812 | 3.5 LOW | SourceCodester Best House Rental Management System POST Parameter ajax.php cross site scri |
| CVE-2024-7844 | 3.5 LOW | SourceCodester Online Graduate Tracer System add_acc.php cross site scripting |
IV. Related Vulnerabilities
Same product: Online Graduate Tracer System
-
CVE-2024-7949
SourceCodester Online Graduate Tracer System fetch_genderit. -
CVE-2024-7931
SourceCodester Online Graduate Tracer System view_csprofile. -
CVE-2024-7845
SourceCodester Online Graduate Tracer System fetch_it.php sq -
CVE-2024-7844
SourceCodester Online Graduate Tracer System add_acc.php cro -
CVE-2024-7843
SourceCodester Online Graduate Tracer System exportcs.php in
Same vendor: SourceCodester
-
CVE-2026-78248
SourceCodester Simple Online Food Ordering System ajax.php s -
CVE-2026-78247
SourceCodester Simple Online Food Ordering System ajax.php c -
CVE-2026-78199
SourceCodester Simple Online Food Ordering System view_prod. -
CVE-2026-78198
SourceCodester Simple Online Food Ordering System ajax.php a -
CVE-2026-78197
SourceCodester Simple Online Food Ordering System ajax.php s
Same weakness: CWE-89
-
CVE-2026-76848
TypeORM 0.2.21 through 1.1.0 SQL Injection via SelectQueryBu -
CVE-2026-78248
SourceCodester Simple Online Food Ordering System ajax.php s -
CVE-2026-78247
SourceCodester Simple Online Food Ordering System ajax.php c -
CVE-2026-32551
WordPress Woo Essential plugin <= 4.3.0 - SQL Injection vuln -
CVE-2026-32478
WordPress WP Project Manager Pro plugin <= 4.0.1 - SQL Injec
V. Comments for CVE-2024-7810
No comments yet