CVE-2024-4914: Campcodes Online Examination System ranking-exam.php sql injection
A vulnerability, which was classified as critical, has been found in Campcodes Online Examination System 1.0. This issue affects some unknown processing of the file ranking-exam.php. The manipulation of the argument examid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264449 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4914?
CVE-2024-4914 is classified as a critical vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2024-4914?
To fix CVE-2024-4914, it is recommended to update the Campcodes Online Examination System to a patched version that addresses SQL injection vulnerabilities.
Which software versions are affected by CVE-2024-4914?
CVE-2024-4914 affects version 1.0 of the Campcodes Online Examination System.
What type of vulnerability is CVE-2024-4914?
CVE-2024-4914 is an SQL injection vulnerability that results from improper handling of the exam_id parameter in the ranking-exam.php file.
Can CVE-2024-4914 be exploited remotely?
Yes, CVE-2024-4914 can be exploited remotely, allowing attackers to manipulate SQL queries.