CVE-2024-4905

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in Kashipara College Management System 1.0. Affected is an unknown function of the file view_students_each_detail.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-264438 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
May 15, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-490508.8Visual Studio Code Python Extension Remote Code Execution VulnerabilityCVE-2024-490517.8Microsoft PC Manager Elevation of Privilege VulnerabilityCVE-2024-490529.8Missing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate privileges over a netCVE-2024-490537.6Microsoft Dynamics 365 Sales Spoofing VulnerabilityCVE-2024-490544.3Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2024-490568.8Authentication bypass by assumed-immutable data on airlift.microsoft.com allows an authorized attacker to elevate privileges over a network.CVE-2024-490578.1Microsoft Defender for Endpoint on Android Spoofing VulnerabilityCVE-2024-490597.0Microsoft Office Elevation of Privilege VulnerabilityCVE-2024-49067.5A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an uCVE-2024-490608.8Azure Stack HCI Elevation of Privilege VulnerabilityCVE-2024-490626.5Microsoft SharePoint Information Disclosure VulnerabilityCVE-2024-490638.4Microsoft/Muzic Remote Code Execution Vulnerability
CVE-2024-4905: High severity, CVSS 8.8 | Vulnix