CVE-2024-2999

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in Campcodes Online Art Gallery Management System 1.0. This affects an unknown part of the file /admin/adminHome.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258201 was assigned to this vulnerability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Mar 27, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-299909.0Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege VulnerabilityCVE-2024-299915.0Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityCVE-2024-299925.5Azure Identity Library for .NET Information Disclosure VulnerabilityCVE-2024-299938.8Azure CycleCloud Elevation of Privilege VulnerabilityCVE-2024-299947.8Microsoft Windows SCSI Class System File Elevation of Privilege VulnerabilityCVE-2024-299958.1Windows Kerberos Elevation of Privilege VulnerabilityCVE-2024-299967.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2024-299976.8Windows Mobile Broadband Driver Remote Code Execution VulnerabilityCVE-2024-299986.8Windows Mobile Broadband Driver Remote Code Execution VulnerabilityCVE-2024-299996.8Windows Mobile Broadband Driver Remote Code Execution VulnerabilityCVE-2024-30009.8A vulnerability classified as critical was found in code-projects Online Book System 1.0. This vulnerability affects unknown code of the filCVE-2024-300006.8Windows Mobile Broadband Driver Remote Code Execution Vulnerability