CVE-2024-3420

CVE-2024-3420 is a critical SQL injection vulnerability affecting SourceCodester Online Courseware version 1.0, specifically within the admin/saveedit.php file when manipulating the 'id' argument. This vulnerability carries a CVSS score of 9.8, indicating a critical severity with a network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation in the wild or readily available exploit frameworks like Metasploit, the exploit has been publicly disclosed, and the vulnerability has garnered significant community discussion, suggesting potential for future exploitation.