CVE-2024-7320
HIGHOnline Blood Bank Management System 1.0 - SQL Injection via Admin Login User Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-7320. PoCs published by cl4irv0yance.
AI-analyzed exploit summary The repository contains a detailed technical analysis of CVE-2024-7320, an authentication bypass via SQL injection in the Online Blood Bank Management System v1.0. It includes root cause analysis, proof-of-concept HTTP requests, and remediation guidance.
Description
A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affects an unknown part of the file /admin/index.php of the component Admin Login. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273231.
Exploits (1)
The repository contains a detailed technical analysis of CVE-2024-7320, an authentication bypass via SQL injection in the Online Blood Bank Management System v1.0. It includes root cause analysis, proof-of-concept HTTP requests, and remediation guidance.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L