{"id":87163,"date":"2026-07-10T15:39:32","date_gmt":"2026-07-10T15:39:32","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T00:00:00","slug":"cve-2024-0182-critical-sql-injection-vulnerability-in-sourcecodester-engineers-online-portal-1-0","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2024-0182-critical-sql-injection-vulnerability-in-sourcecodester-engineers-online-portal-1-0\/","title":{"rendered":"CVE-2024-0182: Critical SQL Injection Vulnerability in SourceCodester Engineers Online Portal 1.0<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The CVE-2024-0182 is a critical vulnerability found in the Engineers Online Portal 1.0 by SourceCodester. This vulnerability affects the \/admin\/ component of the system, specifically the Admin Login functionality. The exploit of this vulnerability could lead to a potential system compromise or data leakage, making it a significant threat.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2024-0182
\nSeverity: Critical (7.3 CVSS Severity Score)
\nAttack Vector: Network
\nPrivileges Required: Low
\nUser Interaction: None
\nImpact: Potential system compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Engineers Online Portal | 1.0<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The exploit works by manipulating the ‘username\/password’ argument of the \/admin\/ component of the product. This manipulation leads to an SQL injection, which could potentially compromise the system or lead to data leakage. The attack vector is network-based, and it can be launched remotely without any user interaction.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

A conceptual example of this vulnerability being exploited could look something like this:<\/p>\n

POST \/admin\/ HTTP\/1.1\nHost: target.example.com\nContent-Type: application\/x-www-form-urlencoded\nusername=admin' OR '1'='1';-- &password=<\/code><\/pre>\n
In this example, the attacker uses the SQL injection technique to manipulate the username argument, effectively bypassing the login mechanism and gaining unauthorized access to the system.<\/p>\n
Mitigation Guidance<\/strong><\/p>\n
As a mitigation measure, users are advised to apply the vendor patch as soon as it becomes available. In the meantime, using a Web Application Firewall (WAF) or Intrusion Detection System (IDS) can provide temporary mitigation. Regularly updating and patching software, as well as implementing secure coding practices and input validation measures, can also help prevent such vulnerabilities.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview The CVE-2024-0182 is a critical vulnerability found in the Engineers Online Portal 1.0 by SourceCodester. This vulnerability affects the \/admin\/ component of the system, specifically the Admin Login functionality. The exploit of this vulnerability could lead to a potential system compromise or data leakage, making it a significant threat. Vulnerability Summary CVE ID: CVE-2024-0182 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-87163","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t