Vulnerability Details CVE-2024-6956
A vulnerability was found in itsourcecode University Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view_cgpa.php. The manipulation of the argument VR/VN leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-272078 is the identifier assigned to this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 9.0%
CVSS Severity
CVSS v3 Score 6.3
CVSS v2 Score 6.5
References
- https://github.com/DeepMountains/Mirage/blob/main/CVE6-2.md
- https://vuldb.com/?ctiid.272078
- https://vuldb.com/?id.272078
- https://vuldb.com/?submit.377754
- https://github.com/DeepMountains/Mirage/blob/main/CVE6-2.md
- https://vuldb.com/?ctiid.272078
- https://vuldb.com/?id.272078
- https://vuldb.com/?submit.377754
Products affected by CVE-2024-6956
-
cpe:2.3:a:angeljudesuarez:university_management_system:1.0