CVE-2024-4911: Campcodes Complete Web-Based School Management System student_exam_mark_update_form.php sql injection

Published May 15, 2024

Updated

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/studentexammarkupdateform.php. The manipulation of the argument exam leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-264446 is the identifier assigned to this vulnerability.

Affected Software

2 affected components

Campcodes School Management Software

Campcodes School Management Software=1.0

Event History

May 15, 2024

CVE Published

via MITRE·08:31 PM

Data Sourced

via MITRE·08:31 PM

DescriptionSeverityWeakness

Apr 1, 57258

Event

via FIRST·07:33 PM

Frequently Asked Questions

What is the severity of CVE-2024-4911?

CVE-2024-4911 has been rated as critical due to its potential impact on the security of the affected system.

How do I fix CVE-2024-4911?

To fix CVE-2024-4911, you should apply the recommended patches from Campcodes or restrict access to the affected file /view/student_exam_mark_update_form.php.

What type of vulnerability is CVE-2024-4911?

CVE-2024-4911 is a SQL injection vulnerability affecting the functionality related to exam argument manipulation.

Which version of the software is affected by CVE-2024-4911?

CVE-2024-4911 affects version 1.0 of Campcodes Complete Web-Based School Management System.

How does CVE-2024-4911 impact users?

CVE-2024-4911 may allow attackers to execute arbitrary SQL queries, leading to unauthorized access to the database and potential data breach.