CVE-2024-6729 Overview
CVE-2024-6729 is a SQL injection vulnerability in SourceCodester Kortex Lite Advocate Office Management System 1.0, developed by Mayurik. The flaw resides in the /control/add_act.php script, where the aname parameter is passed to a database query without proper sanitization. Attackers with low-privilege authenticated access can inject arbitrary SQL statements over the network. The exploit has been publicly disclosed, increasing the likelihood of opportunistic exploitation against exposed installations. The weakness is tracked under CWE-89 (Improper Neutralization of Special Elements used in an SQL Command).
Critical Impact
Remote attackers can manipulate the aname parameter to read, modify, or destroy data in the underlying database of the Advocate Office Management System.
Affected Products
- Mayurik Advocate Office Management System 1.0
- SourceCodester Kortex Lite Advocate Office Management System 1.0
- /control/add_act.php endpoint
Discovery Timeline
- 2024-07-14 - CVE-2024-6729 published to NVD
- 2026-06-17 - Last updated in NVD database
Technical Details for CVE-2024-6729
Vulnerability Analysis
The vulnerability exists in the add_act.php script located under the /control/ directory of the application. The script accepts the aname HTTP parameter and concatenates it directly into an SQL statement executed against the backend database. Because the input is neither parameterized nor escaped, an attacker can break out of the intended string context and append arbitrary SQL fragments.
Exploitation requires only low-privilege authenticated access and no user interaction. The attack can be launched remotely against any internet-exposed instance of the application. Successful injection typically allows record enumeration, unauthorized data modification, and, depending on database privileges, extraction of stored credentials belonging to advocates and clients.
The issue is classified under CWE-89. At the time of publication, the EPSS model estimates a low-to-moderate probability of exploitation activity in the near term.
Root Cause
The root cause is the absence of prepared statements or parameterized queries in the add_act.php handler. User-controlled input from the aname field is concatenated into the SQL query string, allowing metacharacters such as single quotes, comments, and UNION clauses to alter query semantics.
Attack Vector
An authenticated attacker sends a crafted HTTP request to /control/add_act.php with a malicious payload in the aname parameter. The injected SQL is executed with the database privileges assigned to the web application's account. Because the underlying application does not enforce output validation, attackers can chain queries to extract data, enumerate schema information, or bypass application logic.
No verified proof-of-concept code is available in an authoritative repository; refer to the Kunull CVE Report 2024 and VulDB entry #271402 for disclosed technical details.
Detection Methods for CVE-2024-6729
Indicators of Compromise
- HTTP POST or GET requests to /control/add_act.php containing SQL metacharacters such as ', --, UNION, SELECT, or SLEEP( in the aname parameter.
- Web server access logs showing repeated requests to add_act.php from a single source with varied aname values.
- Unexpected database error messages or 500-level responses originating from the add_act.php endpoint.
Detection Strategies
- Deploy web application firewall (WAF) signatures that inspect POST bodies and query strings for common SQL injection patterns on the /control/ path.
- Enable database query logging and alert on anomalous statements executed by the web application service account.
- Correlate authentication events with subsequent SQL error rates to identify credentialed attackers probing the endpoint.
Monitoring Recommendations
- Monitor outbound data volumes from the database server for signs of bulk extraction following requests to add_act.php.
- Track newly created or modified administrative accounts within the Advocate Office Management System database.
- Review web server logs daily for suspicious aname payload patterns until a fixed version is deployed.
How to Mitigate CVE-2024-6729
Immediate Actions Required
- Restrict network access to the Advocate Office Management System so that only trusted users on approved networks can reach /control/add_act.php.
- Rotate all credentials used by the web application to connect to the database and reduce that account's privileges to the minimum required.
- Audit the application database for unauthorized modifications, added users, or exported records.
Patch Information
No official vendor patch is listed in the NVD advisory or vendor resources at the time of writing. Administrators should monitor SourceCodester and Mayurik's release channels for an updated build of the Kortex Lite Advocate Office Management System. Until a fix is available, treat the application as vulnerable and apply the workarounds below.
Workarounds
- Place the application behind a WAF configured with SQL injection rulesets covering the aname parameter and the /control/add_act.php path.
- Modify add_act.php in a supported development environment to use parameterized queries (for example, PDO prepared statements) instead of string concatenation.
- Enforce strict server-side input validation that rejects any aname value containing SQL metacharacters or exceeding expected length.
- If the application is not required, take it offline until a vendor-supplied fix is available.
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
