VDB-258036 · CVE-2024-2945 · GCVE-100-258036

Campcodes Online Examination System 1.0 updateExaminee.php ID SQL Injection

Wuro vulnerability wey an yi classify sey kura an gano shi a cikin Campcodes Online Examination System 1.0. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, /adminpanel/admin/facebox_modal/updateExaminee.php na cikin fayil, $software_component na cikin sashi. Ngam manipulation of the argument ID shi SQL Injection. CWE shidin ka a yi bayani matsala sai ya kai CWE-89. Gaskiya, laifi an fitar da shi 03/26/2024. Advisory ɗin ana rabawa don saukewa a github.com. Wannan rauni ana sayar da shi da suna CVE-2024-2945. Ngam yiɗi ka a tuma ndiyam ka internet. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a github.com. Kama 0-day, an ndiyam a wuro be $0-$5k. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Waktin goyi

Màdùmga

VulDB Mod Team	96

Furɗe

cvss3_meta_tempscore	3
price_0day	2
cvss3_meta_basescore	2
cvss3_vuldb_ui	2
cvss2_cna_basescore	1

Commit Conf

90%	29
70%	26
99%	17
50%	16
80%	8

Approve Conf

80%	33
90%	29
99%	17
70%	17

96 Kari

ID	Sanda	Màdùmga	Furɗe	Gargajiya	Garga	Gargajiya	Jawan	C
19510906	02/21/2025	VulDB…	price_0day	$0-$5k	see exploit price documentation	02/21/2025	shingilam	80
19510905	02/21/2025	VulDB…	cvss3_meta_tempscore	6.2	see CVSS documentation	02/21/2025	shingilam	80
19510904	02/21/2025	VulDB…	cvss3_meta_basescore	6.4	see CVSS documentation	02/21/2025	shingilam	80
19510903	02/21/2025	VulDB…	cvss2_cna_basescore	6.5	see CVSS documentation	02/21/2025	shingilam	99
19510902	02/21/2025	VulDB…	cvss2_cna_ai	P	see CVSS documentation	02/21/2025	shingilam	99
19510901	02/21/2025	VulDB…	cvss2_cna_ii	P	see CVSS documentation	02/21/2025	shingilam	99
19510900	02/21/2025	VulDB…	cvss2_cna_ci	P	see CVSS documentation	02/21/2025	shingilam	99
19510899	02/21/2025	VulDB…	cvss2_cna_au	S	see CVSS documentation	02/21/2025	shingilam	99
19510898	02/21/2025	VulDB…	cvss2_cna_ac	L	see CVSS documentation	02/21/2025	shingilam	99
19510897	02/21/2025	VulDB…	cvss2_cna_av	N	see CVSS documentation	02/21/2025	shingilam	99
19510896	02/21/2025	VulDB…	cvss3_nvd_basescore	6.5	nist.gov	02/21/2025	shingilam	99
19510895	02/21/2025	VulDB…	cvss3_nvd_a	N	nist.gov	02/21/2025	shingilam	99
19510894	02/21/2025	VulDB…	cvss3_nvd_i	N	nist.gov	02/21/2025	shingilam	99
19510893	02/21/2025	VulDB…	cvss3_nvd_c	H	nist.gov	02/21/2025	shingilam	99
19510892	02/21/2025	VulDB…	cvss3_nvd_s	U	nist.gov	02/21/2025	shingilam	99
19510891	02/21/2025	VulDB…	cvss3_nvd_ui	N	nist.gov	02/21/2025	shingilam	99
19510890	02/21/2025	VulDB…	cvss3_nvd_pr	L	nist.gov	02/21/2025	shingilam	99
19510889	02/21/2025	VulDB…	cvss3_nvd_ac	L	nist.gov	02/21/2025	shingilam	99
19510888	02/21/2025	VulDB…	cvss3_nvd_av	N	nist.gov	02/21/2025	shingilam	99
19510887	02/21/2025	VulDB…	cve_nvd_summaryes	Se encontró una vulnerabilidad en Campcodes Online Examination System 1.0. Ha sido clasificada como crítica. Una función desconocida del archivo /adminpanel/admin/facebox_modal/updateExaminee.php es afectada por esta vulnerabilidad. La manipulación del argumento id conduce a la inyección de SQL. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado al público y puede utilizarse. El identificador de esta vulnerabilidad es VDB-258036.	cve.org	02/21/2025	shingilam	99

76 kala giteji ba a nunu fi.

🔒 Login Required

You need to signup and login to see more of the remaining 76 results.

◂ Gurɗo Gumti Gada ▸

Do you need the next level of professionalism?

Upgrade your account now!