{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-5396","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","state":"PUBLISHED","assignerShortName":"VulDB","dateReserved":"2024-05-26T08:50:09.073Z","datePublished":"2024-05-27T02:31:05.124Z","dateUpdated":"2024-08-01T21:11:12.638Z"},"containers":{"cna":{"providerMetadata":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2024-05-27T02:31:05.124Z"},"title":"itsourcecode Online Student Enrollment System newfaculty.php sql injection","problemTypes":[{"descriptions":[{"type":"CWE","cweId":"CWE-89","lang":"en","description":"CWE-89 SQL Injection"}]}],"affected":[{"vendor":"itsourcecode","product":"Online Student Enrollment System","versions":[{"version":"1.0","status":"affected"}]}],"descriptions":[{"lang":"en","value":"A vulnerability classified as critical has been found in itsourcecode Online Student Enrollment System 1.0. Affected is an unknown function of the file newfaculty.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-266310 is the identifier assigned to this vulnerability."},{"lang":"de","value":"Es wurde eine kritische Schwachstelle in itsourcecode Online Student Enrollment System 1.0 entdeckt. Es betrifft eine unbekannte Funktion der Datei newfaculty.php. Dank der Manipulation des Arguments name mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung."}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P"}}],"timeline":[{"time":"2024-05-26T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2024-05-26T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2024-05-26T10:55:27.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Lanxiy7th (VulDB User)","type":"reporter"}],"references":[{"url":"https://vuldb.com/?id.266310","name":"VDB-266310 | itsourcecode Online Student Enrollment System newfaculty.php sql injection","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.266310","name":"VDB-266310 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.344699","name":"Submit #344699 | Itsourcecode Online Student Enrollment System Project 1.0 SQL Injection","tags":["third-party-advisory"]},{"url":"https://github.com/Lanxiy7th/lx_CVE_report-/issues/9","tags":["exploit","issue-tracking"]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-5396","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-05-28T15:58:04.187512Z"}}}],"affected":[{"cpes":["cpe:2.3:a:itsourcecode:online_student_enrollment_system:1.0:*:*:*:*:*:*:*"],"vendor":"itsourcecode","product":"online_student_enrollment_system","versions":[{"status":"affected","version":"1.0"}],"defaultStatus":"unknown"}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-06-04T18:02:32.389Z"}},{"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-01T21:11:12.638Z"},"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.266310","name":"VDB-266310 | itsourcecode Online Student Enrollment System newfaculty.php sql injection","tags":["vdb-entry","technical-description","x_transferred"]},{"url":"https://vuldb.com/?ctiid.266310","name":"VDB-266310 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required","x_transferred"]},{"url":"https://vuldb.com/?submit.344699","name":"Submit #344699 | Itsourcecode Online Student Enrollment System Project 1.0 SQL Injection","tags":["third-party-advisory","x_transferred"]},{"url":"https://github.com/Lanxiy7th/lx_CVE_report-/issues/9","tags":["exploit","issue-tracking","x_transferred"]}]}]}}