CVE-2024-13025

A vulnerability was found in Codezips College Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Front-end/faculty.php. The manipulation of the argument book_name/book_author leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89

• https://github.com/shaturo1337/POCs/blob/main/SQL%20Injection%20in%20College%20Management%20System.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.289716Permissions Required, VDB Entry
• https://vuldb.com/?id.289716Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.471108Third Party Advisory, VDB Entry
• https://github.com/shaturo1337/POCs/blob/main/SQL%20Injection%20in%20College%20Management%20System.mdExploit, Third Party Advisory

Published

Dec 29, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1302Information exposure vulnerability in Badger Meter Monitool …5.5
• CVE-2024-13020A vulnerability classified as critical was found in code-pro…8.8
• CVE-2024-13021A vulnerability, which was classified as problematic, has be…5.4
• CVE-2024-13022A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-13023A vulnerability has been found in PHPGurukul Maid Hiring Man…6.1
• CVE-2024-13024A vulnerability was found in Codezips Blood Bank Management …9.8
• CVE-2024-13026A vulnerability exists in Algo Edge up to 2.1.1 - a previous…6.1
• CVE-2024-13028A vulnerability, which was classified as problematic, has be…6.3
• CVE-2024-13029A vulnerability, which was classified as problematic, was fo…8.8
• CVE-2024-1303Incorrectly limiting the path to a restricted directory vuln…6.5
• CVE-2024-13030A vulnerability was found in D-Link DIR-823G 1.0.2B05_201812…9.8
• CVE-2024-13031A vulnerability classified as problematic has been found in …4.8