CVE-2024-6191: medium-severity vulnerability in itsourcecode Student Management System
itsourcecode Student Management System Login Page login.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.6%
A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unknown part of the file login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269163.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
itsourcecode · Student Management SystemRelated CVEs — itsourcecode Student Management System
In the same product, most dangerous first.
CVE-2025-14257MEDIUMitsourcecode Student Management System newrecord.php sql injectionEPSS 0.5%CVE-2025-14256MEDIUMitsourcecode Student Management System newcurriculm.php sql injectionEPSS 0.5%CVE-2026-2014MEDIUMitsourcecode Student Management System index.php sql injectionEPSS 0.5%CVE-2026-2013MEDIUMitsourcecode Student Management System index.php sql injectionEPSS 0.5%CVE-2025-15075MEDIUMitsourcecode Student Management System student_p.php sql injectionEPSS 0.4%CVE-2026-2012MEDIUMitsourcecode Student Management System index.php sql injectionEPSS 0.4%