CVE-2024-9090

MEDIUM EPSS 43.0%

Published Sep 23, 20241y ago · Modified Jun 17, 20261w ago

5.3 CVSS 4.0

Medium

Published Sep 23, 2024 1y ago

Last Modified Jun 17, 2026 1w ago

Description

A vulnerability was found in SourceCodester Modern Loan Management System 1.0. It has been classified as critical. Affected is an unknown function of the file search_member.php. The manipulation of the argument searchMember leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS Details

Base Score

5.3

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope X

Threat Intelligence

EPSS Exploit Probability

43.0% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-89 SQL Injection Injection

Affected Products 1

Vendor	Product	Version	Range
mayurik	modern_loan_management_system	1.0	any

References 5

vuldb.com https://vuldb.com/?ctiid.278268

Permissions RequiredThird Party AdvisoryVDB Entry
vuldb.com https://vuldb.com/?id.278268

Third Party AdvisoryVDB Entry
vuldb.com https://vuldb.com/?submit.411879

Third Party AdvisoryVDB Entry
shawroot.cc https://www.shawroot.cc/2810.html

ExploitThird Party Advisory
sourcecodester.com https://www.sourcecodester.com/

Product

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.