SQL Injection Vulnerability in itsourcecode University Management System
CVE-2024-6956
Key Information:
- Vendor
Itsourcecode
- Vendor
- CVE Published:
- 21 July 2024
Badges
What is CVE-2024-6956?
A SQL injection vulnerability exists in the itsourcecode University Management System version 1.0, specifically in the /view_cgpa.php file. This flaw allows remote attackers to manipulate the 'VR' and 'VN' parameters, which can lead to unauthorized access to the underlying database. The vulnerability can be exploited without prior authentication, raising significant security concerns for institutions utilizing this application. Security patches and updates should be applied promptly to mitigate potential risks associated with this security flaw. The exploit has already been publicly disclosed, heightening the urgency for organizations to evaluate their exposure and implement necessary safeguards.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
University Management System 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V3.1
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved