CVE-2024-5381: itsourcecode Student Information Management System view.php sql injection
First published: Sun May 26 2024(Updated: )
A vulnerability classified as critical was found in itsourcecode Student Information Management System 1.0. Affected by this vulnerability is an unknown functionality of the file view.php. The manipulation of the argument studentId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266293 was assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Student Information Management System | =1.0 | |
| Student Information Management System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-5381?
CVE-2024-5381 is classified as a critical vulnerability.
How do I fix CVE-2024-5381?
To fix CVE-2024-5381, ensure that proper input validation and parameterized queries are implemented to prevent SQL injection.
What impact does CVE-2024-5381 have?
CVE-2024-5381 allows for SQL injection attacks, which could lead to unauthorized data access or manipulation.
Which software is affected by CVE-2024-5381?
CVE-2024-5381 affects the itsourcecode Student Information Management System version 1.0.
Can CVE-2024-5381 be exploited remotely?
Yes, CVE-2024-5381 can be exploited remotely through the manipulation of the studentId parameter.
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/last-modified-date
- agent/severity
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/guess-ai
- vendor/itsourcecode
- canonical/student information management system
- version/student information management system/1.0