CVE-2024-37840

SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the LessonID parameter.
CVSS

No CVSS.

References
Link Resource
https://github.com/ganzhi-qcy/cve/issues/4 Exploit Issue Tracking Third Party Advisory
https://github.com/ganzhi-qcy/cve/issues/4 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:itsourcecode:learning_management_system:1.0:*:*:*:*:*:*:*

History

10 Jun 2025, 18:12

Type Values Removed Values Added
References () https://github.com/ganzhi-qcy/cve/issues/4 - () https://github.com/ganzhi-qcy/cve/issues/4 - Exploit, Issue Tracking, Third Party Advisory
CPE cpe:2.3:a:itsourcecode:learning_management_system:1.0:*:*:*:*:*:*:*
First Time Itsourcecode learning Management System
Itsourcecode

17 Jun 2024, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-17 19:15

Updated : 2025-06-10 18:12


NVD link : CVE-2024-37840

Mitre link : CVE-2024-37840


JSON object : View

Products Affected

itsourcecode

  • learning_management_system
CWE

No CWE.