CVE-2024-7221: A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. This affects an unknown part of the file /admin/manage_user.php. This manipulation of the argument ID ca...

Summary

A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. This affects an unknown part of the file /admin/manage_user.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and m...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
oretnom23	school_log_management_system	1.0 `cpe:2.3:a:oretnom23:school_log_management_system:1.0:::::::*`

Original advisory text

A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. This affects an unknown part of the file /admin/manage_user.php. This manipulation of the argument ID ca...

A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. This affects an unknown part of the file /admin/manage_user.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

References

https://gist.github.com/topsky979/1e98c4d1a3ba1ed73aab46d360c1c4b8 Exploit
https://vuldb.com/?ctiid.272792 Permissions Required Third Party Advisory
https://vuldb.com/?id.272792 Third Party Advisory
https://vuldb.com/?submit.380428 Third Party Advisory