CVE-2024-2999

A vulnerability classified as critical has been found in Campcodes Online Art Gallery Management System 1.0. This affects an unknown part of the file /admin/adminHome.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258201 was assigned to this vulnerability.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/Online%20Art%20Gallery%20Management%20System%20-%20vuln%201.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.258201Permissions Required, VDB Entry
• https://vuldb.com/?id.258201Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.304765Exploit, Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Online%20Art%20Gallery%20Management%20System%20-%20vuln%201.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.258201Permissions Required, VDB Entry
• https://vuldb.com/?id.258201Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.304765Exploit, Third Party Advisory, VDB Entry

Published

Mar 27, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-29984Microsoft OLE DB Driver for SQL Server Remote Code Execution…8.8
• CVE-2024-29985Microsoft OLE DB Driver for SQL Server Remote Code Execution…8.8
• CVE-2024-29986Microsoft Edge for Android (Chromium-based) Information Disc…5.4
• CVE-2024-29987Microsoft Edge (Chromium-based) Information Disclosure Vulne…6.5
• CVE-2024-29988SmartScreen Prompt Security Feature Bypass Vulnerability8.8
• CVE-2024-29989Azure Monitor Agent Elevation of Privilege Vulnerability8.4
• CVE-2024-29990Microsoft Azure Kubernetes Service Confidential Container El…9
• CVE-2024-29991Microsoft Edge (Chromium-based) Security Feature Bypass Vuln…5
• CVE-2024-29992Azure Identity Library for .NET Information Disclosure Vulne…5.5
• CVE-2024-29993Azure CycleCloud Elevation of Privilege Vulnerability8.8
• CVE-2024-29994Microsoft Windows SCSI Class System File Elevation of Privil…7.8
• CVE-2024-29995Windows Kerberos Elevation of Privilege Vulnerability8.1