CVE-2024-4806

A vulnerability classified as critical was found in Kashipara College Management System 1.0. This vulnerability affects unknown code of the file each_extracurricula_activities.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-263926 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System/College%20Management%20System%20-%20vuln%209.pdfExploit
• https://vuldb.com/?ctiid.263926Permissions Required, VDB Entry
• https://vuldb.com/?id.263926Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.332557Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System/College%20Management%20System%20-%20vuln%209.pdfExploit
• https://vuldb.com/?ctiid.263926Permissions Required, VDB Entry
• https://vuldb.com/?id.263926Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.332557Third Party Advisory, VDB Entry

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-48049Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2024-4805A vulnerability classified as critical has been found in Kas…8.8
• CVE-2024-48050In agentscope <=v0.0.4, the file agentscope\web\workstation\…9.8
• CVE-2024-48052In gradio <=4.42.0, the gr.DownloadButton function has a hid…6.5
• CVE-2024-48057localai <=2.20.1 is vulnerable to Cross Site Scripting (XSS)…6.1
• CVE-2024-48059gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vu…6.1
• CVE-2024-48061langflow <=1.0.18 is vulnerable to Remote Code Execution (RC…9.8
• CVE-2024-48063In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE…9.8
• CVE-2024-48068A cross-site scripting (XSS) vulnerability in Shenzhen Landr…6.1
• CVE-2024-48069A vulnerability was found in Weaver E-cology allows attacker…9.8
• CVE-2024-4807A vulnerability, which was classified as critical, has been …8.8
• CVE-2024-48070An issue in Weaver E-cology v. attackers construct special r…9.8