CVE-2024-1831

CRITICAL 9.8CVE-2024-1831 · Published 23/02/2024 · updated 17/06/2026

In short

CVE-2024-1831 is a CRITICAL (CVSS 9.8) vulnerability affecting complete file management system (nelzkie15).
Chance of exploitation in the next 30 days (EPSS): 0.73%, higher than 54.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
complete file management system nelzkie15	`= 1.0`	No fix yet

Description

A vulnerability, which was classified as critical, was found in SourceCodester Complete File Management System 1.0. Affected is an unknown function of the file users/index.php of the component Login Form. The manipulation of the argument username with the input torada%27+or+%271%27+%3D+%271%27+--+- leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-254622 is the identifier assigned to this vulnerability.

References

toradah.notion.site/Login-Bypass-via-SQL-injection-b1e45264f6104bc696836ade6e60fb98 · Exploit
vuldb.com · Permissions Required
vuldb.com · Permissions Required

More vulnerabilities in complete file management system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free