{"id":"CVE-2024-51030","aliases":["EUVD-2024-45270","GHSA-g5x8-hfc7-9rv7"],"status":"published","title":"A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab...","description":"A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and potential compromise of sensitive data within the database.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00686,"percentile":0.53069,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-89"],"published":"2024-11-08T00:00:00Z","modified":"2026-06-17T08:05:20Z","exploits":[{"source":"pocgithub","id":"vighneshnair7/CVE-2024-51030","title":"vighneshnair7/CVE-2024-51030","date":"2024-11-05","url":"https://github.com/vighneshnair7/CVE-2024-51030"}],"products":[{"vendor":"cab_management_system_project","product":"cab_management_system"},{"vendor":"oretnom23","product":"cab_management_system"}],"references":[{"url":"https://www.sourcecodester.com/php/15180/cab-management-system-phpoop-free-source-code.html","tags":["Product"]},{"url":"https://github.com/vighneshnair7/CVE-2024-51030","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-51030"},{"url":"https://github.com/advisories/GHSA-g5x8-hfc7-9rv7"}],"sources":{"cve":[{"id":"CVE-2024-51030","description":"A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and potential compromise of sensitive data within the database.","status":"published","published":"2024-11-08T00:00:00Z","modified":"2024-11-21T16:16:44.179Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:34:01.972857Z"}],"euvd":[{"id":"EUVD-2024-45270","description":"A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and potential compromise of sensitive data within the database.","status":"published","published":"2024-11-08T00:00:00Z","modified":"2024-11-21T16:16:44Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:52.521149Z"}],"ghsa":[{"id":"GHSA-g5x8-hfc7-9rv7","title":"A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab...","description":"A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and potential compromise of sensitive data within the database.","status":"published","published":"2024-11-08T18:30:50Z","modified":"2024-11-13T18:32:55Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:58:49.226785Z"}],"nvd":[{"id":"CVE-2024-51030","description":"A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and potential compromise of sensitive data within the database.","status":"published","published":"2024-11-08T18:15:17.463Z","modified":"2026-06-17T08:05:20.133Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:10:36.560164Z"}]}}