CVE-2024-5895

CVE-2024-5895 is a critical SQL injection vulnerability affecting SourceCodester Employee and Visitor Gate Pass Logging System version 1.0. Specifically, the delete_users function in /classes/Users.php?f=delete is susceptible to manipulation of the 'id' argument. With a CVSS score of 9.8, this vulnerability is remotely exploitable with low attack complexity, allowing an unauthenticated attacker to achieve full compromise of confidentiality, integrity, and availability. While the exploit has been publicly disclosed, there is no evidence of active exploitation in the wild, nor are there readily available exploit modules in common frameworks like Metasploit or Nuclei. Community discussion and media coverage remain minimal.