CVE-2024-4913

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical was found in Campcodes Online Examination System 1.0. This vulnerability affects unknown code of the file exam.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-264448.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: May 15, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-491328.1Windows Remote Desktop Services Remote Code Execution Vulnerability CVE-2024-491387.8Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2024-49149.8A vulnerability, which was classified as critical, has been found in Campcodes Online Examination System 1.0. This issue affects some unknow CVE-2024-491427.8Microsoft Access Remote Code Execution Vulnerability CVE-2024-491479.8Deserialization of untrusted data in Microsoft Update Catalog allows an unauthorized attacker to elevate privileges on the website’s webserv CVE-2024-49159.8A vulnerability, which was classified as critical, was found in Campcodes Online Examination System 1.0. Affected is an unknown function of CVE-2024-49169.8A vulnerability has been found in Campcodes Online Examination System 1.0 and classified as critical. Affected by this vulnerability is an u CVE-2024-49179.8A vulnerability was found in Campcodes Online Examination System 1.0 and classified as critical. Affected by this issue is some unknown func CVE-2024-49189.8A vulnerability was found in Campcodes Online Examination System 1.0. It has been classified as critical. This affects an unknown part of th CVE-2024-49199.8A vulnerability was found in Campcodes Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown c CVE-2024-491937.5Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming CVE-2024-491947.3Databricks JDBC Driver 2.x before 2.6.40 could potentially allow remote code execution (RCE) by triggering a JNDI injection via a JDBC URL p