Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-33911

Published: 02/05/2024 Updated: 02/05/2024

Vulnerability Summary

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar School Management Pro.This issue affects School Management Pro: from n/a up to and including 10.3.4.

Github Repositories

https://github.com/xbz0n/CVE-2024-33911

The School Management 1034 - Post-Authenticated SQL Injection Exploit Title: The School Management 1034 - Post-Authenticated SQL Injection Date: 29 April, 2024 Exploit Author: Ivan Spiridonov (xbz0n) Vendor Homepage: theschool-managementcom Version: 1034 Tested on: Ubuntu 2204 CVE: CVE-2024-33911 Vulnerability The School Management plugin, version 1034, develo

References

CWE-89https://patchstack.com/database/vulnerability/school-management-pro/wordpress-the-school-management-pro-plugin-10-3-4-sql-injection-vulnerability?_s_id=cvehttps://nvd.nist.govhttps://github.com/xbz0n/CVE-2024-33911
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook