CVE-2024-5105: Campcodes Complete Web-Based School Management System student_payment_details.php sql injection

Published May 19, 2024

Updated

A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/studentpaymentdetails.php. The manipulation of the argument index leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265095.

Affected Software

2 affected components

Campcodes School Management Software

Campcodes School Management Software=1.0

Event History

May 19, 2024

CVE Published

via MITRE·10:31 PM

Data Sourced

via MITRE·10:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:15 PM

DescriptionSeverityWeaknessAffected Software

Apr 6, 58462

Event

via NVD·12:11 PM

Frequently Asked Questions

What is the severity of CVE-2024-5105?

CVE-2024-5105 is classified as a critical vulnerability.

How do I fix CVE-2024-5105?

To fix CVE-2024-5105, validate and sanitize user inputs to prevent SQL injection.

What type of vulnerability is CVE-2024-5105?

CVE-2024-5105 is an SQL injection vulnerability affecting the Campcodes Complete Web-Based School Management System.

Which component is affected by CVE-2024-5105?

CVE-2024-5105 affects the /view/student_payment_details.php file in the application.

Can CVE-2024-5105 be exploited remotely?

Yes, CVE-2024-5105 can potentially be exploited remotely through crafted input.