CVE-2024-5236: Campcodes Complete Web-Based School Management System teacher_salary_invoice1.php sql injection

Published May 23, 2024

Updated

A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/teachersalaryinvoice1.php. The manipulation of the argument date leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265987.

Affected Software

2 affected components

Campcodes School Management Software

Campcodes School Management Software=1.0

Event History

May 23, 2024

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-5236?

CVE-2024-5236 is classified as a critical vulnerability.

What kind of vulnerability is CVE-2024-5236?

CVE-2024-5236 is a SQL injection vulnerability affecting the Campcodes Complete Web-Based School Management System.

How do I fix CVE-2024-5236?

To fix CVE-2024-5236, update the Campcodes Complete Web-Based School Management System to a patched version that addresses the SQL injection flaw.

Which file is affected by CVE-2024-5236?

CVE-2024-5236 affects the file /view/teacher_salary_invoice1.php.

What can be exploited in CVE-2024-5236?

CVE-2024-5236 can be exploited by manipulating the 'date' argument to execute unauthorized SQL queries.