Kashipara E-learning Management System Vulnerable to SQL Injection
CVE-2024-54931

Currently unrated

Key Information:

Vendor: kashipara
Status: E-learning Management System
Vendor: CVE Published:; 9 December 2024

What is CVE-2024-54931?

A SQL Injection was found in /admin/delete_event.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id parameter.

References

https://github.com/m14r41/Writeups/blob/main/CVE/Kashipar...

Timeline

Vulnerability published
Dec 9, 2024