CVE-2024-3522

A vulnerability classified as critical has been found in Campcodes Online Event Management System 1.0. This affects an unknown part of the file /api/process.php. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259893 was assigned to this vulnerability.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/Online%20Event%20Management%20System/Online%20Event%20Management%20System%20-%20vuln%201.pdfExploit
• https://vuldb.com/?ctiid.259893Permissions Required, VDB Entry
• https://vuldb.com/?id.259893Permissions Required, VDB Entry
• https://vuldb.com/?submit.312504Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Online%20Event%20Management%20System/Online%20Event%20Management%20System%20-%20vuln%201.pdfExploit
• https://vuldb.com/?ctiid.259893Permissions Required, VDB Entry
• https://vuldb.com/?id.259893Permissions Required, VDB Entry
• https://vuldb.com/?submit.312504Third Party Advisory, VDB Entry

Published

Apr 9, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-35212A vulnerability has been identified in SINEC Traffic Analyze…6.9
• CVE-2024-35213An improper input validation vulnerability in the SGI Image …9
• CVE-2024-35214A tampering vulnerability in the CylanceOPTICS Windows Insta…7.1
• CVE-2024-35215NULL pointer dereference in IP socket options processing of …6.2
• CVE-2024-35218Umbraco CMS is an ASP.NET CMS used by more than 730.000 webs…4.8
• CVE-2024-35219OpenAPI Generator allows generation of API client libraries …8.3
• CVE-2024-35220@fastify/session is a session plugin for fastify. Requires t…7.4
• CVE-2024-35221Rubygems.org is the Ruby community's gem hosting service. A …4.3
• CVE-2024-35222Tauri is a framework for building binaries for all major des…5.9
• CVE-2024-35223Dapr is a portable, event-driven, runtime for building distr…5.3
• CVE-2024-35224OpenProject is the leading open source project management so…5.4
• CVE-2024-35225Jupyter Server Proxy allows users to run arbitrary external …6.1