CVE-2024-0389

A vulnerability, which was classified as critical, was found in SourceCodester Student Attendance System 1.0. Affected is an unknown function of the file attendance_report.php. The manipulation of the argument class_id leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-250230 is the identifier assigned to this vulnerability.

• CWE-89

• https://drive.google.com/file/d/1Vi-IGjAZbitDqEvmd9ONrxE0MgB8-v1I/view?usp=sharingExploit
• https://vuldb.com/?ctiid.250230Permissions Required, Third Party Advisory
• https://vuldb.com/?id.250230Third Party Advisory
• https://drive.google.com/file/d/1Vi-IGjAZbitDqEvmd9ONrxE0MgB8-v1I/view?usp=sharingExploit
• https://vuldb.com/?ctiid.250230Permissions Required, Third Party Advisory
• https://vuldb.com/?id.250230Third Party Advisory

Published

Jan 10, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0382The WP Recipe Maker plugin for WordPress is vulnerable to St…5.4
• CVE-2024-0383The WP Recipe Maker plugin for WordPress is vulnerable to St…5.4
• CVE-2024-0384The WP Recipe Maker plugin for WordPress is vulnerable to St…5.4
• CVE-2024-0385The Categorify plugin for WordPress is vulnerable to unautho…4.3
• CVE-2024-0386The weForms plugin for WordPress is vulnerable to Stored Cro…6.1
• CVE-2024-0387The EDS-4000/G4000 Series prior to version 3.2 includes IP f…6.5
• CVE-2024-0390INPRAX "iZZi connect" application on Android contains hard-c…9.8
• CVE-2024-0391The check user account lock states feature within the email …4.3
• CVE-2024-0392A Cross-Site Request Forgery (CSRF) vulnerability exists in …5.4
• CVE-2024-0393Rejected reason: This CVE ID was unused by the CNA.
• CVE-2024-0394Rapid7 Minerva Armor versions below 4.5.5 suffer from a priv…7.8
• CVE-2024-0395Rejected reason: NON Security Issue.