CVE-2024-4906

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/show_student1.php. The manipulation of the argument grade leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264441 was assigned to this vulnerability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
May 15, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-490608.8Azure Stack HCI Elevation of Privilege VulnerabilityCVE-2024-490626.5Microsoft SharePoint Information Disclosure VulnerabilityCVE-2024-490638.4Microsoft/Muzic Remote Code Execution VulnerabilityCVE-2024-490646.5Microsoft SharePoint Information Disclosure VulnerabilityCVE-2024-490655.5Microsoft Office Remote Code Execution VulnerabilityCVE-2024-490688.2Microsoft SharePoint Elevation of Privilege VulnerabilityCVE-2024-490697.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2024-49076.5A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This vulnerability aCVE-2024-490707.4Microsoft SharePoint Remote Code Execution VulnerabilityCVE-2024-490716.5Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized aCVE-2024-490727.8Windows Task Scheduler Elevation of Privilege VulnerabilityCVE-2024-490736.8Windows Mobile Broadband Driver Elevation of Privilege Vulnerability