CVE-2024-4805: Kashipara College Management System edit_faculty.php sql injection
First published: Sun May 12 2024(Updated: )
A vulnerability classified as critical has been found in Kashipara College Management System 1.0. This affects an unknown part of the file edit_faculty.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263925 was assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Kashipara College Management System | ||
| Lopalopa College Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-4805?
CVE-2024-4805 is classified as a critical vulnerability.
What kind of attack is associated with CVE-2024-4805?
CVE-2024-4805 is associated with a SQL injection attack.
How can CVE-2024-4805 be exploited?
CVE-2024-4805 can be exploited remotely through the manipulation of the id argument in the edit_faculty.php file.
What impact does CVE-2024-4805 have on the Kashipara College Management System?
CVE-2024-4805 allows for unauthorized access to the database, potentially leading to data leakage or corruption.
How do I fix CVE-2024-4805?
To fix CVE-2024-4805, it is recommended to sanitize and validate all input data in the edit_faculty.php file.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- agent/event
- vendor/kashipara college
- canonical/kashipara college management system
- vendor/lopalopa
- canonical/lopalopa college management system
- version/lopalopa college management system/1.0