A vulnerability was found in code-projects Student Record System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument regno leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
References
Link | Resource |
---|---|
https://code-projects.org/ | Product |
https://github.com/ppp-src/a/issues/21 | Exploit Third Party Advisory |
https://vuldb.com/?ctiid.278269 | Permissions Required Third Party Advisory Vendor Advisory |
https://vuldb.com/?id.278269 | Third Party Advisory Vendor Advisory |
https://vuldb.com/?submit.411912 | Third Party Advisory Vendor Advisory |
Configurations
History
27 Sep 2024, 16:22
Type | Values Removed | Values Added |
---|---|---|
References | () https://code-projects.org/ - Product | |
References | () https://github.com/ppp-src/a/issues/21 - Exploit, Third Party Advisory | |
References | () https://vuldb.com/?ctiid.278269 - Permissions Required, Third Party Advisory, Vendor Advisory | |
References | () https://vuldb.com/?id.278269 - Third Party Advisory, Vendor Advisory | |
References | () https://vuldb.com/?submit.411912 - Third Party Advisory, Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 9.8 |
First Time |
Code-projects student Record System
Code-projects |
|
CPE | cpe:2.3:a:code-projects:student_record_system:1.0:*:*:*:*:*:*:* |
26 Sep 2024, 13:32
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
23 Sep 2024, 00:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-09-23 00:15
Updated : 2024-09-27 16:22
NVD link : CVE-2024-9091
Mitre link : CVE-2024-9091
CVE.ORG link : CVE-2024-9091
JSON object : View
Products Affected
code-projects
- student_record_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')