CVE-2024-4919

A vulnerability was found in Campcodes Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /adminpanel/admin/query/addCourseExe.php. The manipulation of the argument course_name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-264454 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/yylmm/CVE/blob/main/Online%20Examination%20System%20With%20Timer/SQL_addCourseExe.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.264454Permissions Required, VDB Entry
• https://vuldb.com/?id.264454Permissions Required, VDB Entry
• https://vuldb.com/?submit.333416Third Party Advisory, VDB Entry
• https://github.com/yylmm/CVE/blob/main/Online%20Examination%20System%20With%20Timer/SQL_addCourseExe.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.264454Permissions Required, VDB Entry
• https://vuldb.com/?id.264454Permissions Required, VDB Entry
• https://vuldb.com/?submit.333416Third Party Advisory, VDB Entry

Published

May 16, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-49142Microsoft Access Remote Code Execution Vulnerability7.8
• CVE-2024-49147Deserialization of untrusted data in Microsoft Update Catalo…9.8
• CVE-2024-4915A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-4916A vulnerability has been found in Campcodes Online Examinati…9.8
• CVE-2024-4917A vulnerability was found in Campcodes Online Examination Sy…9.8
• CVE-2024-4918A vulnerability was found in Campcodes Online Examination Sy…9.8
• CVE-2024-49193Zendesk before 2024-07-02 allows remote attackers to read ti…7.5
• CVE-2024-49194Databricks JDBC Driver 2.x before 2.6.40 could potentially a…7.3
• CVE-2024-49195Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer under…9.8
• CVE-2024-49196An issue was discovered in the GPU in Samsung Mobile Process…7.5
• CVE-2024-49197An issue was discovered in Wi-Fi in Samsung Mobile Processor…6.5
• CVE-2024-4920A vulnerability was found in SourceCodester Online Discussio…9.8