High severity7.3NVD Advisory· Published Aug 20, 2024· Updated Jun 17, 2026

CVE-2024-7947

Description

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Janobe/Point Of Sales And Inventory Management System
cpe:2.3:a:janobe:point_of_sales_and_inventory_management_system:1.0:*:*:*:*:*:*:*
Sourcecodester/Point of Sales and Inventory Management Systemllm-create2 versions
1.0+ 1 more
- (no CPE)range: 1.0
- (no CPE)range: 1.0

Patches

Vulnerability mechanics

References

github.com/CveSecLook/cve/issues/60nvdExploitIssue Tracking
vuldb.comnvdPermissions RequiredThird Party AdvisoryVDB Entry
vuldb.comnvdPermissions RequiredThird Party AdvisoryVDB Entry
vuldb.comnvdIssue TrackingThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000