CVE-2024-5231

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view/teacher_salary_details.php. The manipulation of the argument index leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-265982 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2021.pdfExploit
• https://vuldb.com/?ctiid.265982Permissions Required, VDB Entry
• https://vuldb.com/?id.265982Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.339807Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2021.pdfExploit
• https://vuldb.com/?ctiid.265982Permissions Required, VDB Entry
• https://vuldb.com/?id.265982Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.339807Third Party Advisory, VDB Entry

Published

May 23, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-52304aiohttp is an asynchronous HTTP client/server framework for …7.5
• CVE-2024-52305UnoPim is an open-source Product Information Management (PIM…4.8
• CVE-2024-52306FileManager provides a Backpack admin interface for files an…9.8
• CVE-2024-52307authentik is an open-source identity provider. Due to the us…5.6
• CVE-2024-52308The GitHub CLI version 2.6.1 and earlier are vulnerable to r…9.6
• CVE-2024-52309SFTPGo is a full-featured and highly configurable SFTP, HTTP…5.1
• CVE-2024-52311Authentication tokens issued via Cognito in data.all are not…6.3
• CVE-2024-52312Due to inconsistent authorization permissions, data.all may …5.4
• CVE-2024-52313An authenticated data.all user is able to manipulate a getDa…5.3
• CVE-2024-52314A data.all admin team member who has access to the customer-…6.9
• CVE-2024-52316Unchecked Error Condition vulnerability in Apache Tomcat. If…9.8
• CVE-2024-52317Incorrect object re-cycling and re-use vulnerability in Apac…6.5