CVE-2024-5396

Summary

CVE-2024-5397 is a critical vulnerability affecting the Online Student Enrollment System 1.0. An unknown functionality in the file instructorSubjects.php is the root cause, allowing for sql injection attacks. Manipulation of the instructorId argument can be exploited remotely, making this a significant threat. The vulnerability has been disclosed to the public, increasing the risk of exploitation. The associated identifier for this issue is VDB-266311.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.