CVE-2024-5391: itsourcecode Online Student Enrollment System listofsubject.php sql injection
First published: Mon May 27 2024(Updated: )
A vulnerability has been found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file listofsubject.php. The manipulation of the argument subjcode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266305 was assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Student Enrollment | ||
| Student Enrollment | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-5391?
CVE-2024-5391 is classified as a critical vulnerability.
How does CVE-2024-5391 affect the Online Student Enrollment System?
CVE-2024-5391 allows for SQL injection via the manipulation of the subjcode argument in listofsubject.php.
What can be done to mitigate CVE-2024-5391?
To mitigate CVE-2024-5391, validate and sanitize user inputs on the subjcode parameter.
Is there a patch available for CVE-2024-5391?
As of now, there is no information regarding an official patch for CVE-2024-5391.
Which version of the Online Student Enrollment System is affected by CVE-2024-5391?
CVE-2024-5391 affects version 1.0 of the Online Student Enrollment System.
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/last-modified-date
- agent/severity
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- vendor/itsourcecode
- canonical/student enrollment
- version/student enrollment/1.0