Skip to content
OpenAdvisories
Medium · 4.7 CVE-2024-3621 EUVD-2024-32200GHSA-jqqv-px8m-v953

SourceCodester Kortex Lite Advocate Office Management System register_case.php sql injection

Published Apr 11, 2024 · Updated Aug 1, 2024 · Assigned by VulDB

Description

A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been classified as critical. This affects an unknown part of the file /control/register_case.php. The manipulation of the argument title/case_no/client_name/court/case_type/case_stage/legel_acts/description/filling_date/hearing_date/opposite_lawyer/total_fees/unpaid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260277 was assigned to this vulnerability.

Affected products

VendorProductAffectedFixed
SourceCodester Kortex Lite Advocate Office Management System 1.0 —

References