Security Advisory

CVE-2024-40402

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-07-17 00:00:00
Last updated 2024-08-02 04:33:11
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attackers to inject malicious SQL queries.