CVE-2024-34934: SQL Injection
A SQL injection vulnerability in /view/emarksrangegradeupdateform.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversationid parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34934?
CVE-2024-34934 is classified as a high-severity SQL injection vulnerability that can allow attackers to execute arbitrary SQL commands.
How does CVE-2024-34934 exploit work?
CVE-2024-34934 exploits the conversation_id parameter in /view/emarks_range_grade_update_form.php to execute malicious SQL commands.
How can I fix CVE-2024-34934?
To fix CVE-2024-34934, validate and sanitize all user inputs, particularly the conversation_id parameter, to prevent SQL injection.
Which version of Campcodes Complete Web-Based School Management System is affected by CVE-2024-34934?
CVE-2024-34934 affects version 1.0 of the Campcodes Complete Web-Based School Management System.
Are there any known exploits for CVE-2024-34934?
As of now, specific exploits for CVE-2024-34934 have been reported, allowing attackers to perform SQL injection attacks.