Skip to main content

Scholars Tracking System CVE-2024-24099

MEDIUM
SQL Injection (CWE-89)
2024-02-27 cve@mitre.org
SQLi Scholars Tracking System
5.4
CVSS 3.1 · Vendor: mitre
Share

Severity by source

Vendor (mitre) PRIMARY
5.4 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Feb 27, 2024 - 02:15 cve.org
MEDIUM 5.4

DescriptionCVE.org

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update.

AnalysisAI

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as SQL Injection (CWE-89), which allows attackers to execute arbitrary SQL commands against the database. Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update. Affected products include: Code-Projects Scholars Tracking System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized queries/prepared statements. Never concatenate user input into SQL. Apply least-privilege database permissions.

More in Scholars Tracking System

View all
CVE-2025-70152 CRITICAL POC
9.8 Feb 18

SQL injection in code-projects Community Project Scholars Tracking System 1.0 admin user management. Allows database com
CVE-2025-70151 HIGH POC
8.8 Feb 18

Scholars Tracking System versions up to 1.0 is affected by unrestricted upload of file with dangerous type (CVSS 8.8).
CVE-2024-24101 CRITICAL
9.8 Mar 12

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update. Rated cr
CVE-2024-24093 CRITICAL
9.8 Mar 12

SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Per
CVE-2025-14951 MEDIUM POC
5.5 Dec 19

A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unk
CVE-2025-14950 MEDIUM POC
5.5 Dec 19

A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown functio
CVE-2025-14940 MEDIUM POC
5.5 Dec 19

A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown functio
CVE-2024-24092 HIGH
7.8 Mar 12

SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via
CVE-2024-24098 HIGH
7.8 Mar 05

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed. Rated high severity (CVSS 7
CVE-2024-24097 MEDIUM
5.4 Mar 12

Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary

Same weakness CWE-89 – SQL Injection

View all
CVE-2023-48788 CRITICAL POC
9.8
CVE-2025-57819 CRITICAL POC
10.0
CVE-2017-8917 CRITICAL POC
9.8
CVE-2024-27956 CRITICAL POC
9.9
CVE-2014-3704 HIGH POC
7.5
CVE-2016-2555 CRITICAL POC
9.8
CVE-2016-8582 CRITICAL POC
9.8
CVE-2015-7297 HIGH POC
7.5

Same technique SQLi

View all
CVE-2025-57819 CRITICAL POC
10.0
CVE-2017-8917 CRITICAL POC
9.8
CVE-2024-27956 CRITICAL POC
9.9
CVE-2014-3704 HIGH POC
7.5
CVE-2016-2555 CRITICAL POC
9.8
CVE-2016-8582 CRITICAL POC
9.8
CVE-2013-0333 HIGH POC
7.5
CVE-2015-7297 HIGH POC
7.5

Share

CVE-2024-24099 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy