CVE-2024-5104

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/student_grade_wise.php. The manipulation of the argument grade leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-265094 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Campcodes	Complete Web-Based School Management System	1.0
campcodes	complete_web-based_school_management_system	1.0

References

https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%209.pdfExploit
https://vuldb.com/?ctiid.265094Permissions Required, VDB Entry
https://vuldb.com/?id.265094Third Party Advisory, VDB Entry
https://vuldb.com/?submit.338507Third Party Advisory, VDB Entry
https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%209.pdfExploit
https://vuldb.com/?ctiid.265094Permissions Required, VDB Entry
https://vuldb.com/?id.265094Third Party Advisory, VDB Entry
https://vuldb.com/?submit.338507Third Party Advisory, VDB Entry

Timeline

Published: May 19, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-51058.8A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown CVE-2024-510519.8AVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account.CVE-2024-510539.8An arbitrary file upload vulnerability in the component /main/fileupload.php of AVSCMS v8.2.0 allows attackers to execute arbitrary code via CVE-2024-510544.8A Cross Site Scriptng (XSS) vulnerability was found in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System 1.0, which a CVE-2024-510556.5An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component.CVE-2024-510586.2Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read arbitrary files from CVE-2024-51068.8A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects un CVE-2024-510609.1Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'a_id' parameter.CVE-2024-510639.1Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter CVE-2024-510649.8Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection via the tid parameter to admin/queries.php.CVE-2024-510659.8Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter.CVE-2024-510667.5An Insecure Direct Object Reference (IDOR) vulnerability in appointment-detail.php in Phpgurukul's Beauty Parlour Management System v1.1 all