Skip to main content

Scholars Tracking System CVE-2024-24098

HIGH
SQL Injection (CWE-89)
2024-03-05 cve@mitre.org
SQLi Scholars Tracking System
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Mar 05, 2024 - 16:15 nvd
HIGH 7.8

DescriptionNVD

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed.

AnalysisAI

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as SQL Injection (CWE-89), which allows attackers to execute arbitrary SQL commands against the database. Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed. Affected products include: Fabian Scholars Tracking System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized queries/prepared statements. Never concatenate user input into SQL. Apply least-privilege database permissions.

More in Scholars Tracking System

View all
CVE-2025-70152 CRITICAL POC
9.8 Feb 18

SQL injection in code-projects Community Project Scholars Tracking System 1.0 admin user management. Allows database com
CVE-2025-70151 HIGH POC
8.8 Feb 18

Scholars Tracking System versions up to 1.0 is affected by unrestricted upload of file with dangerous type (CVSS 8.8).
CVE-2024-24101 CRITICAL
9.8 Mar 12

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update. Rated cr
CVE-2024-24093 CRITICAL
9.8 Mar 12

SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Per
CVE-2025-14951 MEDIUM POC
5.5 Dec 19

A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unk
CVE-2025-14950 MEDIUM POC
5.5 Dec 19

A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown functio
CVE-2025-14940 MEDIUM POC
5.5 Dec 19

A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown functio
CVE-2024-24092 HIGH
7.8 Mar 12

SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via
CVE-2024-24097 MEDIUM
5.4 Mar 12

Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary
CVE-2024-24099 MEDIUM
5.4 Feb 27

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update. Ra

Same weakness CWE-89 – SQL Injection

View all
CVE-2023-48788 CRITICAL POC
9.8
CVE-2025-57819 CRITICAL POC
10.0
CVE-2017-8917 CRITICAL POC
9.8
CVE-2024-27956 CRITICAL POC
9.9
CVE-2014-3704 HIGH POC
7.5
CVE-2016-2555 CRITICAL POC
9.8
CVE-2016-8582 CRITICAL POC
9.8
CVE-2015-7297 HIGH POC
7.5

Same technique SQLi

View all
CVE-2025-57819 CRITICAL POC
10.0
CVE-2017-8917 CRITICAL POC
9.8
CVE-2024-27956 CRITICAL POC
9.9
CVE-2014-3704 HIGH POC
7.5
CVE-2016-2555 CRITICAL POC
9.8
CVE-2016-8582 CRITICAL POC
9.8
CVE-2013-0333 HIGH POC
7.5
CVE-2015-7297 HIGH POC
7.5

Share

CVE-2024-24098 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy