Skip to main content

Scholars Tracking System CVE-2024-24098

HIGH
SQL Injection (CWE-89)
2024-03-05 cve@mitre.org
SQLi Scholars Tracking System Fabian
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Mar 05, 2024 - 16:15 nvd
HIGH 7.8

DescriptionNVD

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed.

AnalysisAI

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as SQL Injection (CWE-89), which allows attackers to execute arbitrary SQL commands against the database. Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed. Affected products include: Fabian Scholars Tracking System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized queries/prepared statements. Never concatenate user input into SQL. Apply least-privilege database permissions.

More in Scholars Tracking System

View all
CVE-2025-70152 CRITICAL POC
9.8 Feb 18

SQL injection in code-projects Community Project Scholars Tracking System 1.0 admin user management. Allows database com
CVE-2025-70151 HIGH POC
8.8 Feb 18

Scholars Tracking System versions up to 1.0 is affected by unrestricted upload of file with dangerous type (CVSS 8.8).
CVE-2024-24101 CRITICAL
9.8 Mar 12

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update. Rated cr
CVE-2024-24093 CRITICAL
9.8 Mar 12

SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Per
CVE-2025-14951 MEDIUM POC
5.5 Dec 19

SQL injection in Scholars Tracking System 1.0 allows remote attackers to manipulate the post_content parameter in /home.
CVE-2025-14950 MEDIUM POC
5.5 Dec 19

SQL injection in code-projects Scholars Tracking System 1.0 allows remote, unauthenticated attackers to manipulate datab
CVE-2025-14940 MEDIUM POC
5.5 Dec 19

SQL injection in Scholars Tracking System 1.0 allows remote unauthenticated attackers to manipulate the ID parameter in

CVE-2024-24092 HIGH
7.8 Mar 12

SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via
CVE-2024-24097 MEDIUM
5.4 Mar 12

Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary
CVE-2024-24099 MEDIUM
5.4 Feb 27

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update. Ra

Same weakness CWE-89 – SQL Injection

View all
CVE-2023-48788 CRITICAL POC
9.8
CVE-2019-7481 HIGH POC
7.5
CVE-2025-57819 CRITICAL POC
10.0
CVE-2017-8917 CRITICAL POC
9.8
CVE-2024-27956 CRITICAL POC
9.9
CVE-2014-3704 HIGH POC
7.5
CVE-2016-2555 CRITICAL POC
9.8
CVE-2016-8582 CRITICAL POC
9.8

Same technique SQLi

View all
CVE-2019-7481 HIGH POC
7.5
CVE-2025-57819 CRITICAL POC
10.0
CVE-2017-8917 CRITICAL POC
9.8
CVE-2024-27956 CRITICAL POC
9.9
CVE-2014-3704 HIGH POC
7.5
CVE-2016-2555 CRITICAL POC
9.8
CVE-2016-8582 CRITICAL POC
9.8
CVE-2013-0333 HIGH POC
7.5

Share

CVE-2024-24098 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy