Dashboard / CVE-2024-3418

CVE-2024-3418

MEDIUM
MEDIUM Priority: 0.04 BB Relevance: 63/100
Published: 2024-04-07 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: Low
I: Low
A: Low

Description

A vulnerability, which was classified as critical, was found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file admin/deactivateteach.php. The manipulation of the argument selector leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-259590 is the identifier assigned to this vulnerability.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
SourceCodester Online Courseware 1.0
SourceCodester Online Courseware 1.0

References & Advisories (4)

https://vuldb.com/?id.259590
vdb-entry technical-description
https://vuldb.com/?submit.311596
third-party-advisory
https://vuldb.com/?ctiid.259590
signature permissions-required

Bug Bounty Relevance

63 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

6.3 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS — Exploitation Probability

0.71%
Raw Score 0.007070
Percentile 54.0%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00707
2026-11-13
0.00707
2026-11-12
0.00707
2026-11-10
0.00707
2026-11-09
0.00707
2026-11-08
0.00707
2026-11-07
0.00707
2026-11-06
0.00707
2026-11-05
0.00707
2026-11-04
0.00707
2026-11-03
0.00707

Intelligence Sources

mitre ref →

External Links