CVE-2024-3523

A vulnerability classified as critical was found in Campcodes Online Event Management System 1.0. This vulnerability affects unknown code of the file /views/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-259894 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/Online%20Event%20Management%20System/Online%20Event%20Management%20System%20-%20vuln%202.pdfExploit
• https://vuldb.com/?ctiid.259894Permissions Required, VDB Entry
• https://vuldb.com/?id.259894Permissions Required, VDB Entry
• https://vuldb.com/?submit.312505Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Online%20Event%20Management%20System/Online%20Event%20Management%20System%20-%20vuln%202.pdfExploit
• https://vuldb.com/?ctiid.259894Permissions Required, VDB Entry
• https://vuldb.com/?id.259894Permissions Required, VDB Entry
• https://vuldb.com/?submit.312505Third Party Advisory, VDB Entry

Published

Apr 9, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-35224OpenProject is the leading open source project management so…5.4
• CVE-2024-35225Jupyter Server Proxy allows users to run arbitrary external …6.1
• CVE-2024-35226Smarty is a template engine for PHP, facilitating the separa…7.3
• CVE-2024-35227Discourse is an open-source discussion platform. Prior to ve…7.5
• CVE-2024-35228Wagtail is an open source content management system built on…5.5
• CVE-2024-35229ZKsync Era is a layer 2 rollup that uses zero-knowledge proo…5.3
• CVE-2024-35230GeoServer is an open source software server written in Java …5.3
• CVE-2024-35231rack-contrib provides contributed rack middleware and utilit…8.6
• CVE-2024-35232github.com/huandu/facebook is a Go package that fully suppor…3.7
• CVE-2024-35234Discourse is an open-source discussion platform. Prior to ve…6.1
• CVE-2024-35235OpenPrinting CUPS is an open source printing system for Linu…6.7
• CVE-2024-35236Audiobookshelf is a self-hosted audiobook and podcast server…4.8