CVE-2024-5104: Campcodes Complete Web-Based School Management System student_grade_wise.php sql injection

Published May 19, 2024

Updated

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/studentgradewise.php. The manipulation of the argument grade leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-265094 is the identifier assigned to this vulnerability.

Affected Software

2 affected components

Campcodes School Management Software

Campcodes School Management Software=1.0

Event History

May 19, 2024

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-5104?

CVE-2024-5104 has been rated as critical due to its potential for SQL injection vulnerabilities.

How do I fix CVE-2024-5104?

To resolve CVE-2024-5104, sanitize and validate user input in the /view/student_grade_wise.php file to prevent SQL injection.

What component is affected by CVE-2024-5104?

CVE-2024-5104 affects the Campcodes Complete Web-Based School Management System specifically at the /view/student_grade_wise.php endpoint.

What type of vulnerability is CVE-2024-5104?

CVE-2024-5104 is classified as an SQL injection vulnerability, allowing manipulation of SQL queries.

What are the potential impacts of CVE-2024-5104?

Exploitation of CVE-2024-5104 could allow attackers to execute arbitrary SQL queries, potentially leading to data leakage or database compromise.