CVE-2024-12898mediumCWE-74CWE-89

CVE-2024-12898: medium-severity vulnerability in 1000 Projects Attendance Tracking Management…

1000 Projects Attendance Tracking Management System faculty_action.php sql injection

Published · Updated

Follow this CVE+ Monitor Attendance Tracking Management System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.5%
A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/faculty_action.php. The manipulation of the argument faculty_course_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
1000 Projects · Attendance Tracking Management System
Related CVEs — 1000 Projects Attendance Tracking Management…

In the same product, most dangerous first.

CVE-2024-12497MEDIUM1000 Projects Attendance Tracking Management System check_admin_login.php sql injectionEPSS 0.9%CVE-2024-13005MEDIUM1000 Projects Attendance Tracking Management System attendance_action.php sql injectionEPSS 0.7%CVE-2024-12940MEDIUM1000 Projects Attendance Tracking Management System student_action.php sql injectionEPSS 0.7%CVE-2024-12787MEDIUM1000 Projects Attendance Tracking Management System check_student_login.php sql injectionEPSS 0.7%CVE-2024-12946MEDIUM1000 Projects Attendance Tracking Management System admin_action.php sql injectionEPSS 0.6%CVE-2024-12899MEDIUM1000 Projects Attendance Tracking Management System course_action.php sql injectionEPSS 0.6%