CVE-2024-6731

MEDIUM

Student Study Center Desk Management System 1.0 - SQL Injection via /Master.php id Parameter

Title source: llm
STIX 2.1

Description

A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. This affects an unknown part of the file /Master.php?f=save_student. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

References (6)

Core 6
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.271449
Permissions Required, Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.271449
Third Party Advisory third-party-advisory
https://vuldb.com/?submit.374362
Various Sources product
https://www.sourcecodester.com/

Scores

CVSS v3 6.3
EPSS 0.0008
EPSS Percentile 23.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-89
Status published
Products (1)
oretnom23/student_study_center_desk_management_system 1.0
Published Jul 14, 2024
Tracked Since Feb 18, 2026