CVE-2024-2516

A vulnerability, which was classified as critical, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of the file home.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256953 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-89

• https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Blind%20SQL%20Injection%20-%20home.php.mdBroken Link
• https://vuldb.com/?ctiid.256953Permissions Required, VDB Entry
• https://vuldb.com/?id.256953Permissions Required, VDB Entry
• https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Blind%20SQL%20Injection%20-%20home.php.mdBroken Link
• https://vuldb.com/?ctiid.256953Permissions Required, VDB Entry
• https://vuldb.com/?id.256953Permissions Required, VDB Entry

Published

Mar 16, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-25152Stored cross-site scripting (XSS) vulnerability in Message B…5.4
• CVE-2024-25153A directory traversal within the ‘ftpservlet’ of the FileCat…9.8
• CVE-2024-25154Improper URL validation leads to path traversal in FileCatal…5.3
• CVE-2024-25155In FileCatalyst Direct 3.8.8 and earlier through 3.8.6, the …6.1
• CVE-2024-25156 A path traversal vulnerability exists in GoAnywhere MFT pri…6.5
• CVE-2024-25157An authentication bypass vulnerability in GoAnywhere MFT pri…6.5
• CVE-2024-25164iA Path Traversal vulnerability exists in iDURAR v2.0.0, tha…7.5
• CVE-2024-25165A global-buffer-overflow vulnerability was found in SWFTools…7.8
• CVE-2024-25166Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a…6.1
• CVE-2024-25167Cross Site Scripting vulnerability in eblog v1.0 allows a re…6.1
• CVE-2024-25168SQL injection vulnerability in snow snow v.2.0.0 allows a re…6.3
• CVE-2024-25169An issue in Mezzanine v6.0.0 allows attackers to bypass acce…9.8