First published: Sun May 19 2024(Updated: )
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/student_grade_wise.php. The manipulation of the argument grade leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-265094 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Campcodes School Management Software | ||
=1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-5104 has been rated as critical due to its potential for SQL injection vulnerabilities.
To resolve CVE-2024-5104, sanitize and validate user input in the /view/student_grade_wise.php file to prevent SQL injection.
CVE-2024-5104 affects the Campcodes Complete Web-Based School Management System specifically at the /view/student_grade_wise.php endpoint.
CVE-2024-5104 is classified as an SQL injection vulnerability, allowing manipulation of SQL queries.
Exploitation of CVE-2024-5104 could allow attackers to execute arbitrary SQL queries, potentially leading to data leakage or database compromise.