github.comexploit
https://github.com/zyairelai/CVE-submissions/blob/main/kortex-adds-sqli.md CVE-2024-3620
MEDIUM
SourceCodester Kortex Lite Advocate Office Management System adds.php sql injection
Record summary
CVE-2024-3620 has a selected CVSS score of 4.7 (medium).
Description
A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /control/adds.php. The manipulation of the argument name/gender/dob/email/mobile/address leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-260276.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 23, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Kortex Lite Advocate Office Management SystemBrowse SourceCodester / Kortex Lite Advocate Office Management System | CVE List | 1.0 | affected |
References
5nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-3620 VDB-260276 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions required
https://vuldb.com/?ctiid.260276 VDB-260276 | SourceCodester Kortex Lite Advocate Office Management System adds.php sql injectionvdb entryTechnical description
https://vuldb.com/?id.260276 Submit #312815 | Sourcodester Kortex Lite Advocate Office Management System v1.0 SQL injectionThird-party advisory
https://vuldb.com/?submit.312815