CVE-2024-5397

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical was found in itsourcecode Online Student Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file instructorSubjects.php. The manipulation of the argument instructorId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266311.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
itsourcecode	Online Student Enrollment System	1.0
itsourcecode	online_student_enrollment_system	1.0

References

https://github.com/Lanxiy7th/lx_CVE_report-/issues/10Exploit, Third Party Advisory
https://vuldb.com/?ctiid.266311Permissions Required, VDB Entry
https://vuldb.com/?id.266311Third Party Advisory, VDB Entry
https://vuldb.com/?submit.344700Third Party Advisory, VDB Entry
https://github.com/Lanxiy7th/lx_CVE_report-/issues/10Exploit, Third Party Advisory
https://vuldb.com/?ctiid.266311Permissions Required, VDB Entry
https://vuldb.com/?id.266311Third Party Advisory, VDB Entry
https://vuldb.com/?submit.344700Third Party Advisory, VDB Entry

Timeline

Published: May 27, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-539705.4Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused CVE-2024-539745.4Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused CVE-2024-539755.4Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar to, misleadingly, appe CVE-2024-539765.4Under certain circumstances, navigating to a webpage would result in the address missing from the location URL bar, making it unclear what t CVE-2024-539777.8A vulnerability has been identified in ModelSim (All versions < V2025.1), Questa (All versions < V2025.1). An example setup script contained CVE-2024-539798.2ibm.ibm_zhmc is an Ansible collection for the IBM Z HMC. The Ansible collection "ibm.ibm_zhmc" writes password-like properties in clear text CVE-2024-539807.5RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other em CVE-2024-539817.5python-multipart is a streaming multipart parser for Python. When parsing form data, python-multipart skips line breaks (CR \r or LF \n) in CVE-2024-539828.7ZOO-Project is a C-based WPS (Web Processing Service) implementation. A path traversal vulnerability was discovered in Zoo-Project Echo exam CVE-2024-539835.4The Backstage Scaffolder plugin Houses types and utilities for building scaffolder-related modules. A vulnerability is identified in Backsta CVE-2024-539844.3Nanopb is a small code-size Protocol Buffers implementation. When the compile time option PB_ENABLE_MALLOC is enabled, the message contains CVE-2024-539856.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain