CVE-2024-6193
HIGHitsourcecode Vehicle Management System 1.0 - SQL Injection
Title source: llmDescription
A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. This issue affects some unknown processing of the file driverprofile.php. The manipulation of the argument driverid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-269165 was assigned to this vulnerability.
References (4)
Core 4
Core References
Third Party Advisory vdb-entry
technical-description
https://vuldb.com/?id.269165
Permissions Required signature
permissions-required
https://vuldb.com/?ctiid.269165
Issue Tracking third-party-advisory
https://vuldb.com/?submit.359018
Exploit, Technical Description, Third Party Advisory exploit
issue-tracking
https://github.com/HryspaHodor/CVE/issues/5
Scores
CVSS v3
7.3
EPSS
0.0053
EPSS Percentile
41.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-89
Status
published
Products (1)
itsourcecode/vehicle_management_system_project_in_php_and_mysql_with_source_code
1.0
Published
Jun 20, 2024
Tracked Since
Feb 18, 2026