← Database

CVE-2024-40402

MEDIUM CVSS: 6.3 Published: 2024-07-17 Modified: 2026-06-17

Description

A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attackers to inject malicious SQL queries.

Affected Platforms

Nikhil-Bhalerao Simple Library Management System

Weakness Type

CWE-89

References