CVE-2024-48427

8.8 highEPSS 0.9%

High (8.8) in oretnom23 packers and movers management system. EPSS 0.9% chance of exploitation in the next 30 days.

A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in /mpms/admin/?page=services/manage_service&id

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-10-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

oretnom23:packers_and_movers_management_system

References

https://github.com/vighneshnair7/CVE-2024-48427/blob/main/README.md
https://www.sourcecodester.com/php/15360/packers-and-movers-management-system-phpoop-free-source-code.html

Check your stack JSON