Campcodes Complete Web-Based School Management System 1.0 Vulnerable to SQL Injection

CVE-2024-5240

6.3MEDIUM

Key Information

Vendor: Campcodes
Status: Complete Web-based School Management System
Vendor: CVE Published:; 23 May 2024

Summary

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unread_msg.php. The manipulation of the argument my_index leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265991.

Affected Version(s)

Complete Web-Based School Management System = 1.0

CVSS V3.1

Score:

6.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Risk change from: null to: 6.3 - (MEDIUM)
May 23, 2024
Vulnerability published.
May 23, 2024
VulDB entry last update
May 22, 2024
Vulnerability Reserved.
May 22, 2024
VulDB entry created
May 22, 2024
Advisory disclosed
May 22, 2024

Collectors

NVD DatabaseMitre Database

Credit

SSL_Seven_Security Lab_WangZhiQiang_XiaoZiLong (VulDB User)