CVE-2024-5588

A vulnerability was found in itsourcecode Learning Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file processscore.php. The manipulation of the argument LessonID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266839.
References
Link Resource
https://github.com/Lanxiy7th/lx_CVE_report-/issues/12 Exploit Third Party Advisory
https://github.com/Lanxiy7th/lx_CVE_report-/issues/12 Exploit Third Party Advisory
https://vuldb.com/?ctiid.266839 Permissions Required VDB Entry
https://vuldb.com/?ctiid.266839 Permissions Required VDB Entry
https://vuldb.com/?id.266839 Third Party Advisory VDB Entry
https://vuldb.com/?id.266839 Third Party Advisory VDB Entry
https://vuldb.com/?submit.347576 Third Party Advisory VDB Entry
https://vuldb.com/?submit.347576 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:itsourcecode:learning_management_system:1.0:*:*:*:*:*:*:*

History

11 Feb 2025, 15:05

Type Values Removed Values Added
CWE CWE-89
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
First Time Itsourcecode learning Management System
Itsourcecode
CPE cpe:2.3:a:itsourcecode:learning_management_system:1.0:*:*:*:*:*:*:*
References () https://vuldb.com/?id.266839 - () https://vuldb.com/?id.266839 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.347576 - () https://vuldb.com/?submit.347576 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?ctiid.266839 - () https://vuldb.com/?ctiid.266839 - Permissions Required, VDB Entry
References () https://github.com/Lanxiy7th/lx_CVE_report-/issues/12 - () https://github.com/Lanxiy7th/lx_CVE_report-/issues/12 - Exploit, Third Party Advisory

02 Jun 2024, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-02 15:15

Updated : 2025-02-11 15:05


NVD link : CVE-2024-5588

Mitre link : CVE-2024-5588


JSON object : View

Products Affected

itsourcecode

  • learning_management_system
CWE

No CWE.