CVE-2024-5233

CVSS 3.1 Score 6.3 of 10 (medium)

Details

Published May 23, 2024
Updated: Jun 4, 2024
CWE ID 89

Summary

CVE-2024-5233 is a critical vulnerability affecting the Campcodes Complete Web-Based School Management System 1.0. The issue lies in the code of the file /view/teacher_salary_details3.php, which is vulnerable to SQL injection. An attacker can manipulate argument indices, enabling remote code execution. The exploit for this vulnerability has been disclosed publicly, increasing the risk of potential attacks. This vulnerability is identified as VDB-265984.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share