CVE-2024-4795: A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manage_user.php. The manipu...

Summary

A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manage_user.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has ...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
campcodes	online_laundry_management_system	1.0 `cpe:2.3:a:campcodes:online_laundry_management_system:1.0:::::::*`

Original advisory text

A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manage_user.php. The manipu...

A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manage_user.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-263894 is the identifier assigned to this vulnerability.

References

https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/sq... Exploit
https://vuldb.com/?ctiid.263894 Permissions Required VDB Entry
https://vuldb.com/?id.263894 Third Party Advisory VDB Entry
https://vuldb.com/?submit.332537 Third Party Advisory VDB Entry