CVE-2024-4808: Kashipara College Management System delete_faculty.php sql injection
First published: Mon May 13 2024(Updated: )
A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0. Affected is an unknown function of the file delete_faculty.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263928.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Kashipara College Management System | ||
| Lopalopa College Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-4808?
CVE-2024-4808 is classified as a critical vulnerability.
How does CVE-2024-4808 affect the Kashipara College Management System?
CVE-2024-4808 allows for SQL injection via the delete_faculty.php file, potentially enabling remote attacks.
What are the consequences of exploiting CVE-2024-4808?
Exploitation of CVE-2024-4808 can lead to unauthorized access to the database and manipulation of sensitive data.
How do I fix CVE-2024-4808?
To fix CVE-2024-4808, validate and sanitize user inputs in the affected delete_faculty.php file and use parameterized queries.
Is there a patch available for CVE-2024-4808 in Kashipara College Management System 1.0?
As of now, there is no official patch available for CVE-2024-4808, so users should implement the recommended mitigation strategies.
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- agent/event
- vendor/kashipara
- canonical/kashipara college management system
- vendor/lopalopa
- canonical/lopalopa college management system
- version/lopalopa college management system/1.0