CVE-2024-11261

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in SourceCodester Student Record Management System 1.0. Affected is an unknown function of the file StudentRecordManagementSystem.cpp of the component Number of Students Menu. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
SourceCodester	Student Record Management System	1.0
sourcecodester	student_record_management_system	1.0

References

https://github.com/Hacker0xone/CVE/issues/12Exploit, Issue Tracking, Third Party Advisory
https://vuldb.com/?ctiid.284718Permissions Required, VDB Entry
https://vuldb.com/?id.284718Permissions Required, VDB Entry
https://vuldb.com/?submit.443906Third Party Advisory, VDB Entry
https://www.sourcecodester.com/Product

Timeline

Published: Nov 15, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-112627.8A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as critical. Affected by this vulnerabi CVE-2024-112638.4When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past the start of the .sda CVE-2024-112654.3The Increase Maximum Upload File Size | Increase Execution Time plugin for WordPress is vulnerable to Full Path Disclosure in all versions u CVE-2024-112664.8The Geocache Stat Bar Widget WordPress plugin through 0.911 does not sanitise and escape some of its settings, which could allow high privil CVE-2024-112678.8The JSP Store Locator WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing use CVE-2024-112685.5A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vul CVE-2024-112697.2The AHAthat Plugin WordPress plugin through 1.6 does not sanitize and escape a parameter before using it in a SQL statement, allowing Admin CVE-2024-11274.3The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data due to a missing ca CVE-2024-112708.8The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check CVE-2024-112714.3The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on CVE-2024-112726.1The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise and escape some of its settings,CVE-2024-112736.1The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise and escape some of its settings,