Lucene search
CVE-2024-6274
Vulnerability in lahirudanushka School Management System 1.0.0/1.0.1 allows remote SQL injection via /attendancelist.ph
Show more
| Reporter | Title | Published | Views | Family All 4 |
|---|---|---|---|---|
 | CVE-2024-6274 lahirudanushka School Management System Attendance Report Page attendancelist.php sql injection | 24 Jun 202401:00 | – | vulnrichment |
 | CVE-2024-6274 | 24 Jun 202402:15 | – | nvd |
 | CVE-2024-6274 lahirudanushka School Management System Attendance Report Page attendancelist.php sql injection | 24 Jun 202401:00 | – | cvelist |
 | CVE-2024-6274 | 24 Jun 202402:15 | – | osv |
Node
[
{
"vendor": "lahirudanushka",
"product": "School Management System",
"versions": [
{
"version": "1.0.0",
"status": "affected"
},
{
"version": "1.0.1",
"status": "affected"
}
],
"modules": [
"Attendance Report Page"
]
}
]| Source | Link |
|---|---|
| vuldb | www.vuldb.com/ |
| powerful-bulb-c36 | www.powerful-bulb-c36.notion.site/sql-injection-1-6b3c66351180485ea764561a47239907 |
| vuldb | www.vuldb.com/ |
| vuldb | www.vuldb.com/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| aid | query param | /attendancelist.php | SQL injection vulnerability in the attendance report page allows remote attackers to manipulate the aid parameter. | CWE-89 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo24 Jun 2024 02:15Current
6.2Medium risk
Vulners AI Score6.2
CVSS25.8
CVSS34.7 - 8.8
CVSS45.1
EPSS0.00799
SSVC