CVE-2024-5381: itsourcecode Student Information Management System view.php sql injection
A vulnerability classified as critical was found in itsourcecode Student Information Management System 1.0. Affected by this vulnerability is an unknown functionality of the file view.php. The manipulation of the argument studentId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266293 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5381?
CVE-2024-5381 is classified as a critical vulnerability.
How do I fix CVE-2024-5381?
To fix CVE-2024-5381, ensure that proper input validation and parameterized queries are implemented to prevent SQL injection.
What impact does CVE-2024-5381 have?
CVE-2024-5381 allows for SQL injection attacks, which could lead to unauthorized data access or manipulation.
Which software is affected by CVE-2024-5381?
CVE-2024-5381 affects the itsourcecode Student Information Management System version 1.0.
Can CVE-2024-5381 be exploited remotely?
Yes, CVE-2024-5381 can be exploited remotely through the manipulation of the studentId parameter.