CVE-2024-48427

HIGH

Oretnom23 Packers And Movers Management System - SQL Injection

Title source: rule
STIX 2.1

Description

A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in /mpms/admin/?page=services/manage_service&id

Exploits (1)

nomisec WRITEUP 1 stars
by vighneshnair7 · poc
https://github.com/vighneshnair7/CVE-2024-48427

References (2)

Scores

CVSS v3 8.8
EPSS 0.1716
EPSS Percentile 95.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-89
Status published
Products (1)
oretnom23/packers_and_movers_management_system 1.0
Published Oct 24, 2024
Tracked Since Feb 18, 2026