CVE-2024-1923

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as critical. Affected by this issue is the function delete_class/delete_student of the file /ajax-api.php of the component List of Classes Page. The manipulation of the argument id with the input 1337'+or+1=1;--+ leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-254858 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/SOURCECODESTER%20%5BSimple%20Student%20Attendance%20System%20using%20PHP%20and%20MySQL%5D%20SQLi%20on%20ajax-api.php%3Faction=delete_class.mdExploit
• https://vuldb.com/?ctiid.254858Permissions Required, VDB Entry
• https://vuldb.com/?id.254858Third Party Advisory, VDB Entry
• https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/SOURCECODESTER%20%5BSimple%20Student%20Attendance%20System%20using%20PHP%20and%20MySQL%5D%20SQLi%20on%20ajax-api.php%3Faction=delete_class.mdExploit
• https://vuldb.com/?ctiid.254858Permissions Required, VDB Entry
• https://vuldb.com/?id.254858Third Party Advisory, VDB Entry

Published

Feb 27, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1917Integer Overflow or Wraparound vulnerability in Mitsubishi E…9.8
• CVE-2024-1918A vulnerability has been found in Byzoro Smart S42 Managemen…9.8
• CVE-2024-1919A vulnerability classified as problematic was found in Sourc…5.4
• CVE-2024-1920A vulnerability, which was classified as critical, has been …8.1
• CVE-2024-1921A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-1922A vulnerability has been found in SourceCodester Online Job …5.4
• CVE-2024-1924A vulnerability was found in CodeAstro Membership Management…5.3
• CVE-2024-1925A vulnerability was found in Ctcms 2.1.2. It has been declar…8.1
• CVE-2024-1926A vulnerability was found in SourceCodester Free and Open So…9.8
• CVE-2024-1927A vulnerability classified as critical was found in SourceCo…9.8
• CVE-2024-1928A vulnerability, which was classified as critical, has been …7.2
• CVE-2024-1929Local Root Exploit via Configuration Dictionary in dnf5daem…8.4