CVE-2024-7221

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. This affects an unknown part of the file /admin/manage_user.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	School Log Management System	1.0
Campcodes	School Log Management System	1.0

References

https://gist.github.com/topsky979/1e98c4d1a3ba1ed73aab46d360c1c4b8Exploit
https://vuldb.com/?ctiid.272792Permissions Required, Third Party Advisory
https://vuldb.com/?id.272792Third Party Advisory
https://vuldb.com/?submit.380428Third Party Advisory
https://gist.github.com/topsky979/1e98c4d1a3ba1ed73aab46d360c1c4b8Exploit
https://vuldb.com/?ctiid.272792Permissions Required, Third Party Advisory
https://vuldb.com/?id.272792Third Party Advisory
https://vuldb.com/?submit.380428Third Party Advisory

Timeline

Published: Jul 30, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-72229.8A vulnerability, which was classified as critical, was found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown CVE-2024-72239.8A vulnerability has been found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this vulnerab CVE-2024-72249.8A vulnerability was found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this issue is some CVE-2024-72255.4A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown CVE-2024-72268.8A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulnerability affects unk CVE-2024-72277.8Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate CVE-2024-72285.5Avast Free Antivirus Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service CVE-2024-72297.8Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privile CVE-2024-72307.8Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privile CVE-2024-72317.8Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privile CVE-2024-72327.8Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate CVE-2024-72337.8Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate