SQL Injection Vulnerability in Campcodes Complete Web-Based School Management System
CVE-2024-4909
What is CVE-2024-4909?
A vulnerability has been identified in Campcodes Complete Web-Based School Management System 1.0, exploiting a weakness in the '/view/student_due_payment.php' file. The issue arises from inadequate handling of the 'due_year' argument, which is susceptible to SQL injection attacks. Malicious actors can remotely manipulate this argument to gain unauthorized access to the database, potentially exposing sensitive user information. The vulnerability has been disclosed publicly, prompting the need for immediate action to secure affected systems. For further details, you can consult resources such as VDB-264444.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Complete Web-Based School Management System 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V3.1
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved