CVE-2024-6277
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Jun 24, 2024
CWE ID 89
Summary
CVE-2024-6277 is a critical vulnerability affecting the lahirudanushka School Management System versions 1.0.0 and 1.0.1. An unknown function in the student.php component's Student Page is the target, where manipulation of the 'update' argument can lead to SQL injection. This vulnerability allows remote attackers to exploit the system, and the exploit for this issue has already been disclosed to the public. VDB-269490 is the identifier assigned to this security concern.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.