High severity7.3OSV Advisory· Published Jun 23, 2024· Updated Jun 17, 2026
CVE-2024-6268
CVE-2024-6268
Description
A vulnerability, which was classified as critical, has been found in lahirudanushka School Management System 1.0.0/1.0.1. Affected by this issue is some unknown functionality of the file login.php of the component Login Page. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269480.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3V1.0.1+ 1 more
- (no CPE)range: V1.0.1
- (no CPE)range: 1.0.0, 1.0.1
- Range: 1.0.0, 1.0.1
Patches
Vulnerability mechanics
References
5- powerful-bulb-c36.notion.site/SQL-injection-to-authorization-bypass-af95fa2c72b84b4297e3d61c17cd7cdbnvdExploitThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- github.com/lahirudanushka/School-Management-System---PHP-MySQL/issues/2nvdIssue Tracking
- vuldb.comnvdPermissions RequiredVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.