CVE-2024-52675

SourceCodester Sentiment Based Movie Rating System 1.0 is vulnerable to SQL Injection in /msrps/movies.php

Critical · published November 19, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

🚨 Hold onto your popcorn! A sneaky SQL injection vulnerability in SourceCodester's Sentiment Based Movie Rating System could give attackers the keys to your database! 🔥 Think of this vulnerability like an unwatched movie theater — a crafty intruder could slip in through the side door, bypassing all security checks, and gain access to sensitive data without anyone noticing. With this SQL injection flaw, an attacker could manipulate the database to extract sensitive information, change ratings, or even delete movie entries entirely! The potential damage could lead to data breaches, loss of user trust, and even financial implications as malicious users wreak havoc with your movie ratings and user data.

Put simply

Think of this vulnerability like an unwatched movie theater — a crafty intruder could slip in through the side door, bypassing all security checks, and gain access to sensitive data without anyone noticing. This vulnerability allows attackers to insert malicious SQL queries into the 'movies.php' endpoint, enabling unauthorized access to the database and manipulation of its contents.

What to do

With this SQL injection flaw, an attacker could manipulate the database to extract sensitive information, change ratings, or even delete movie entries entirely! The potential damage could lead to data breaches, loss of user trust, and even financial implications as malicious users wreak havoc with your movie ratings and user data. Immediately patch to the latest version of the Sentiment Based Movie Rating System. Implement prepared statements to prevent SQL injection attacks, and conduct a thorough audit of all database interactions to ensure no other vulnerabilities exist. You've got this! Secure your system and keep your theater running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00510 · 42.6th percentile
Published
2024-11-19T00:00Z
EPSS history
Timeline
  • 19 NOV 00:00Z
    SourceCodester Sentiment Based Movie Rating System 1.0 is vulnerable to SQL Injection in /msrps/movies.php
    cvelistv5