CVE-2024-4795

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manage_user.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-263894 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Campcodes	Online Laundry Management System	1.0

References

https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/sql_manage_user.mdExploit
https://vuldb.com/?ctiid.263894Permissions Required, VDB Entry
https://vuldb.com/?id.263894Third Party Advisory, VDB Entry
https://vuldb.com/?submit.332537Third Party Advisory, VDB Entry
https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/sql_manage_user.mdExploit
https://vuldb.com/?ctiid.263894Permissions Required, VDB Entry
https://vuldb.com/?id.263894Third Party Advisory, VDB Entry
https://vuldb.com/?submit.332537Third Party Advisory, VDB Entry

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-479505.4In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings CVE-2024-479515.4In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings CVE-2024-47968.8A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as critical. This affects an unknown par CVE-2024-479627.8Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based b CVE-2024-479637.8Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object.CVE-2024-479647.8Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based bu CVE-2024-479657.8Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. CVE-2024-479667.8Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malici CVE-2024-479674.4Improper resource initialization handling in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of ser CVE-2024-479684.4Improper resource shutdown in middle of certain operations on some Solidigm DC Products may allow an attacker to potentially enable denial o CVE-2024-479696.2Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service.CVE-2024-47976.1A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been declared as problematic. This vulnerability affects