CVE-2024-3423

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Online Courseware 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/activateteach.php. The manipulation of the argument selector leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259595.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Online Courseware	1.0
online_courseware_project	online_courseware	1.0

References

https://github.com/thisissuperann/Vul/blob/Online-Courseware/Online-Courseware-08.mdExploit
https://vuldb.com/?ctiid.259595Permissions Required
https://vuldb.com/?id.259595Third Party Advisory, VDB Entry
https://vuldb.com/?submit.311601Third Party Advisory, VDB Entry
https://github.com/thisissuperann/Vul/blob/Online-Courseware/Online-Courseware-08.mdExploit
https://vuldb.com/?ctiid.259595Permissions Required
https://vuldb.com/?id.259595Third Party Advisory, VDB Entry
https://vuldb.com/?submit.311601Third Party Advisory, VDB Entry

Timeline

Published: Apr 7, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-342306.1A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scr CVE-2024-342317.1A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scr CVE-2024-342358.6Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An CVE-2024-34249.8A vulnerability classified as critical has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file a CVE-2024-342406.1QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in arbitrary code execution in admin functions related to add CVE-2024-342414.8A cross-site scripting (XSS) vulnerability in Rocketsoft Rocket LMS 1.9 allows an administrator to store a JavaScript payload using the admi CVE-2024-342435.4Konga v0.14.9 is vulnerable to Cross Site Scripting (XSS) via the username parameter.CVE-2024-342447.5libmodbus v3.1.10 is vulnerable to Buffer Overflow via the modbus_write_bits function. This issue can be triggered when the function is fed CVE-2024-342456.5An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in ma CVE-2024-342467.5wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault via the function "main" in wasm3/platfo CVE-2024-342499.8wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault via the function "DeallocateSlot" in wasm3/s CVE-2024-34259.8A vulnerability classified as critical was found in SourceCodester Online Courseware 1.0. Affected by this vulnerability is an unknown funct