Medium severity6.3NVD Advisory· Published Jul 17, 2024· Updated Jun 17, 2026

CVE-2024-40402

Description

A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attackers to inject malicious SQL queries.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nikhil Bhalerao/Simple Library Management System
cpe:2.3:a:nikhil-bhalerao:simple_library_management_system:1.0:*:*:*:*:*:*:*
Sourcecodester/Simple Barangay Management Systemcpe-rescue
Sourcecodester/Simple Library Management Systemllm-create
Range: = 1.0

Patches

Vulnerability mechanics

References

github.com/CveSecLook/cve/issues/49nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000