CVE-2024-4805

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in Kashipara College Management System 1.0. This affects an unknown part of the file edit_faculty.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263925 was assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Kashipara	College Management System	1.0
kashipara	college_management_system	1.0

References

https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System/College%20Management%20System%20-%20vuln%208.pdfExploit
https://vuldb.com/?ctiid.263925Permissions Required, VDB Entry
https://vuldb.com/?id.263925Third Party Advisory, VDB Entry
https://vuldb.com/?submit.332556Third Party Advisory, VDB Entry
https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System/College%20Management%20System%20-%20vuln%208.pdfExploit
https://vuldb.com/?ctiid.263925Permissions Required, VDB Entry
https://vuldb.com/?id.263925Third Party Advisory, VDB Entry
https://vuldb.com/?submit.332556Third Party Advisory, VDB Entry

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-480509.8In agentscope <=v0.0.4, the file agentscope\web\workstation\workflow_utils.py has the function is_callable_expression. Within this function,CVE-2024-480526.5In gradio <=4.42.0, the gr.DownloadButton function has a hidden server-side request forgery (SSRF) vulnerability. The reason is that within CVE-2024-480576.1localai <=2.20.1 is vulnerable to Cross Site Scripting (XSS). When calling the delete model API and passing inappropriate parameters, it can CVE-2024-480596.1gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in WebSocket session transmission.CVE-2024-48068.8A vulnerability classified as critical was found in Kashipara College Management System 1.0. This vulnerability affects unknown code of the CVE-2024-480619.8langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the components run on th CVE-2024-480639.8In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior i CVE-2024-480686.1A cross-site scripting (XSS) vulnerability in Shenzhen Landray Software Co.,LTD Landray EKP v16 and earlier allows attackers to execute arbi CVE-2024-480699.8A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files an CVE-2024-48078.8A vulnerability, which was classified as critical, has been found in Kashipara College Management System 1.0. This issue affects some unknow CVE-2024-480709.8An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code execution,CVE-2024-480716.5E-cology has a directory traversal vulnerability. An attacker can exploit this vulnerability to delete the server directory, causing the ser