First published: Thu May 23 2024(Updated: )
A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /view/timetable_update_form.php. The manipulation of the argument grade leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-265990 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Campcodes School Management Software | =1.0 | |
Campcodes School Management Software | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-5239 is classified as a critical severity vulnerability.
To fix CVE-2024-5239, you should sanitize user inputs and implement prepared statements to prevent SQL injection.
CVE-2024-5239 is a SQL injection vulnerability affecting the Campcodes Complete Web-Based School Management System.
CVE-2024-5239 affects version 1.0 of the Campcodes Complete Web-Based School Management System.
CVE-2024-5239 affects the file /view/timetable_update_form.php.