CVE-2024-7167

Summary

CVE-2024-7167 is a newly disclosed critical vulnerability affecting SourceCodester School Fees Payment System 1.0. The issue lies within an unknown functionality of the file /manage_course.php, where manipulation of the id argument results in SQL injection. This vulnerability can be exploited remotely, meaning an attacker does not require access to the system to launch an attack. The exploit for this vulnerability has been made public, increasing the risk of potential exploitation. Vulnerability Database (VDB) has assigned the identifier VDB-272581 to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.