CVE-2024-24139
Published: 29 January 2024
Summary
CVE-2024-24139 is a high-severity SQL Injection (CWE-89) vulnerability in Remyandrade Login System With Email Verification. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 8.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
CVE-2024-24139 is an SQL injection vulnerability, tracked as CWE-89, in Sourcecodester Login System with Email Verification 1.0. The flaw resides in the login component and is triggered via the user parameter, enabling an attacker to alter backend database queries.
An authenticated attacker with high privileges can send crafted input over the network to read, modify, or delete data and potentially take full control of the application database, consistent with the CVSS 7.2 rating that reflects high impact across confidentiality, integrity, and availability.
Public GitHub repositories document the injection vector and provide proof-of-concept material for the affected login system, but no vendor advisory or patch information is included in the references. The EPSS score has remained flat at 0.075 with no material upward movement since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-21563
Vulnerability details
Sourcecodester Login System with Email Verification 1.0 allows SQL Injection via the 'user' parameter.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.