First published: Mon May 20 2024(Updated: )
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view/student_payment_invoice.php. The manipulation of the argument index leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265100.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Campcodes School Management Software | ||
Campcodes School Management Software | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-5110 is classified as a critical vulnerability.
CVE-2024-5110 allows for SQL injection through the manipulation of the argument index in the file /view/student_payment_invoice.php.
CVE-2024-5110 affects version 1.0 of the Campcodes Complete Web-Based School Management System.
To fix CVE-2024-5110, you should sanitize and validate all user inputs to prevent SQL injection.
Exploiting CVE-2024-5110 can lead to unauthorized access to sensitive data in the database.