CVE-2024-5392

Description

A vulnerability was found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file editSubject.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-266306 is the identifier assigned to this vulnerability.

Risk Information

Base Score

6.3

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS Score

Exploitation Probability

0.078

Associated Vulnerability

Vulnerability	OS Platform
emacs Security Update (ALAS-2025-2757) emacs-terminal-27.2-4.amzn2.0.6.noarch.rpm	Linux
emacs Security Update (ALAS-2025-2757) emacs-nox-27.2-4.amzn2.0.6.x86_64.rpm	Linux
emacs Security Update (ALAS-2025-2757) emacs-lucid-27.2-4.amzn2.0.6.x86_64.rpm	Linux
emacs Security Update (ALAS-2025-2757) emacs-filesystem-27.2-4.amzn2.0.6.noarch.rpm	Linux
emacs Security Update (ALAS-2025-2757) emacs-devel-27.2-4.amzn2.0.6.x86_64.rpm	Linux
emacs Security Update (ALAS-2025-2757) emacs-27.2-4.amzn2.0.6.x86_64.rpm	Linux
emacs Security Update (ALAS-2025-2757) emacs-common-27.2-4.amzn2.0.6.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234