CVE-2024-8340 MEDIUM

CVE-2024-8340: SourceCodester Electric Billing Management System Actions.php sql injection

Vendor Sourcecodester

Product Electric Billing Management System

Weakness CWE-89 · SQLi

Published August 30, 2024

Last update September 6, 2024

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability classified as critical has been found in SourceCodester Electric Billing Management System 1.0. This affects an unknown part of the file /Actions.php?a=login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

August 30, 2024 CVE published

September 6, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-8340

Related vulnerabilities

04Related CVE

CVE-2025-28942 WordPress Trust Payments Gateway for WooCommerce plugin <= 1.1.4 - SQL Injection vulnerability CVE-2025-4080 PHPGurukul Online Nurse Hiring System view-request.php sql injection CVE-2025-14578 itsourcecode Student Management System update_account.php sql injection CVE-2025-8969 itsourcecode Online Tour and Travel Management System approve_user.php sql injection CVE-2024-8348 SourceCodester Computer Laboratory Management System Master.php delete_category sql injection