CVE-2024-6277

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-6277
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-6277.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-6277
Published
2024-06-24T03:15:10Z
Modified
2025-01-08T09:54:18.250218Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability, which was classified as critical, was found in lahirudanushka School Management System 1.0.0/1.0.1. Affected is an unknown function of the file student.php of the component Student Page. The manipulation of the argument update leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-269490 is the identifier assigned to this vulnerability.

References

Affected packages

Git / github.com/lahirudanushka/school-management-system---php-mysql

Affected ranges

Type
GIT
Repo
https://github.com/lahirudanushka/school-management-system---php-mysql
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected

Affected versions

V1.*

V1.0.1