CVE-2024-5108

· MEDIUMAnalyzed

← All CVEs

CVSS v3.1

6.3

CVSS v4.0

5.3

EPSS

0.41%

Published

May 19, 2024

Modified

Feb 21, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/student_payment_details4.php. The manipulation of the argument index leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-265098 is the identifier assigned to this vulnerability.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-89

Affected Products (1)

campcodes · complete_web-based_school_management_systemvulnerable

References (8)

https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2013.pdf

Exploit

https://vuldb.com/?ctiid.265098

Permissions RequiredVDB Entry

https://vuldb.com/?id.265098