CVE-2024-34928 in Complete Web-Based School Management System

Riassunto

di MITRE • 23/05/2024

A SQL injection vulnerability in /model/update_subject_routing.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 09/05/2024
• Divulgazione: 23/05/2024
• Moderazione: accettato
• Voce: VDB-266071
• CPE: pronto
• CWE: CWE-89 (confermato)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00317
• KEV: no
• Attività: molto basso
• Settore: Hospital, Pharma, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-34928
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-34928
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-34928/