CVE-2024-4926: SourceCodester School Intramurals Student Attendance Management System manage_student.php sql injection
First published: Thu May 16 2024(Updated: )
A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /intrams_sams/manage_student.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-264462 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester School Intramurals Student Attendance Management System | ||
| Oretnom23 School Intramurals - Student Attendance Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-4926?
CVE-2024-4926 has been classified as critical.
How do I fix CVE-2024-4926?
To fix CVE-2024-4926, ensure input validation is implemented to prevent SQL injection in the affected functions.
What type of vulnerability is CVE-2024-4926?
CVE-2024-4926 is classified as an SQL injection vulnerability.
Which file is affected by CVE-2024-4926?
CVE-2024-4926 affects the file /intrams_sams/manage_student.php.
What can happen if CVE-2024-4926 is exploited?
Exploitation of CVE-2024-4926 may allow an attacker to manipulate database queries and access sensitive data.
- agent/references
- agent/title
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- vendor/sourcecodester
- canonical/sourcecodester school intramurals student attendance management system
- vendor/oretnom23
- canonical/oretnom23 school intramurals - student attendance management system
- version/oretnom23 school intramurals - student attendance management system/1.0