Vulnerability Details CVE-2024-0389
A vulnerability, which was classified as critical, was found in SourceCodester Student Attendance System 1.0. Affected is an unknown function of the file attendance_report.php. The manipulation of the argument class_id leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-250230 is the identifier assigned to this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.5%
CVSS Severity
CVSS v3 Score 6.3
CVSS v2 Score 5.8
References
Products affected by CVE-2024-0389
-
cpe:2.3:a:student_attendance_system_project:student_attendance_system:1.0