CVE-2024-7449

CVE-2024-7449 is a critical SQL injection vulnerability affecting the itsourcecode Placement Management System 1.0, specifically within the login.php file when handling the 'email' argument. This flaw allows for remote exploitation, potentially leading to full compromise of the system. With a CVSS score of 9.8 (Critical), the vulnerability is easily exploitable over the network with no user interaction required, resulting in high impacts to confidentiality, integrity, and availability. While the exploit has been publicly disclosed, there is currently no evidence of active exploitation, nor are there readily available Metasploit or Nuclei modules, and community discussion remains minimal.