Critical Vulnerability in Campcodes Web-Based School Management System Allows Remote SQL Injection

CVE-2024-5236

6.3MEDIUM

Key Information

Vendor: Campcodes
Status: Complete Web-based School Management System
Vendor: CVE Published:; 23 May 2024

Summary

A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/teacher_salary_invoice1.php. The manipulation of the argument date leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265987.

Affected Version(s)

Complete Web-Based School Management System = 1.0

CVSS V3.1

Score:

6.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Risk change from: null to: 6.3 - (MEDIUM)
May 23, 2024
Vulnerability published.
May 23, 2024
VulDB entry last update
May 22, 2024
Vulnerability Reserved.
May 22, 2024
VulDB entry created
May 22, 2024
Advisory disclosed
May 22, 2024

Collectors

NVD DatabaseMitre Database

Credit

SSL_Seven_Security Lab_WangZhiQiang_XiaoZiLong (VulDB User)