Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

SQL injection lets attackers bypass login in Sourcecodester system

CVE-2024-24139 · published 2 years ago
Summary

The login page of the Sourcecodester system can be tricked by entering specially crafted data in the username field, allowing attackers to run database commands. This could let them read or change user data or log in without credentials. Update the code to use safe database queries or apply a patch.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
remyandrade login_system_with_email_verification 1.0
cpe:2.3:a:remyandrade:login_system_with_email_verification:1.0:*:*:*:*:*:*:*
Original advisory text
Sourcecodester Login System with Email Verification 1.0 allows SQL Injection via the 'user' parameter.
Sourcecodester Login System with Email Verification 1.0 allows SQL Injection via the 'user' parameter.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.2 High
Exploitation
1% chance of attack within 30 days
Type
CWE-89SQL Injection
Timeline
Published29 Jan 2024
Updated4 Nov 2026
First seen14 Mar 2026
Sources
CVE-2024-24139 · OSV
CVE-2024-24139 · NVD
Track software like this
Free during beta