CVE-2024-35359

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_item. Manipulating the argument id can result in SQL injection.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
dino_physics_school_assistant_project	dino_physics_school_assistant	2.3

References

https://vuln.pentester.stream/pentester-vulnerability-research/post/2298737/vuln15-blind-sql-injection-time-basedExploit, Third Party Advisory
https://vuln.pentester.stream/pentester-vulnerability-research/post/2298737/vuln15-blind-sql-injection-time-basedExploit, Third Party Advisory

Timeline

Published: May 30, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-35368.8A vulnerability has been found in Campcodes Church Management System 1.0 and classified as critical. This vulnerability affects unknown code CVE-2024-353619.8MTab Bookmark v1.9.5 has an SQL injection vulnerability in /LinkStore/getIcon. An attacker can execute arbitrary SQL statements through this CVE-2024-353625.4Ecshop 3.6 is vulnerable to Cross Site Scripting (XSS) via ecshop/article_cat.php.CVE-2024-353658.8FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stre CVE-2024-353669.1FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When pa CVE-2024-353679.1FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer CVE-2024-353689.8FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c.CVE-2024-353695.5In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient v CVE-2024-35378.8A vulnerability was found in Campcodes Church Management System 1.0 and classified as critical. This issue affects some unknown processing o CVE-2024-353717.5Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization CVE-2024-353739.8Mocodo Mocodo Online 4.2.6 and below is vulnerable to Remote Code Execution via /web/rewrite.php.CVE-2024-353749.8Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sql_case input field in /web/generate.php, allowing remote attackers to