CVE-2024-4796

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as critical. This affects an unknown part of the file /manage_inv.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263895.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Campcodes	Online Laundry Management System	1.0
campcodes	online_laundry_management_system	1.0

References

https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/sql_manage_inv.mdExploit
https://vuldb.com/?ctiid.263895Permissions Required, VDB Entry
https://vuldb.com/?id.263895Third Party Advisory, VDB Entry
https://vuldb.com/?submit.332538Third Party Advisory, VDB Entry
https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/sql_manage_inv.mdExploit
https://vuldb.com/?ctiid.263895Permissions Required, VDB Entry
https://vuldb.com/?id.263895Third Party Advisory, VDB Entry
https://vuldb.com/?submit.332538Third Party Advisory, VDB Entry

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-479627.8Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based b CVE-2024-479637.8Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object.CVE-2024-479647.8Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based bu CVE-2024-479657.8Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. CVE-2024-479667.8Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malici CVE-2024-479674.4Improper resource initialization handling in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of ser CVE-2024-479684.4Improper resource shutdown in middle of certain operations on some Solidigm DC Products may allow an attacker to potentially enable denial o CVE-2024-479696.2Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service.CVE-2024-47976.1A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been declared as problematic. This vulnerability affects CVE-2024-479716.5Improper error handling in firmware of some SSD DC Products may allow an attacker to enable denial of service.CVE-2024-479724.0Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially control the performance of the re CVE-2024-479735.1In some Solidigm DC Products, a defect in device overprovisioning may provide information disclosure to an attacker.