CVE-2024-2528 is a critical SQL injection vulnerability affecting MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0. Specifically, it resides in the /admin/update-rooms.php file, allowing remote attackers to manipulate the room_id argument. With a CVSS score of 8.8 (High), this vulnerability is easily exploitable over the network with low attack complexity, requiring only low privileges. Successful exploitation can lead to complete compromise of confidentiality, integrity, and availability of the affected system. The exploit has been publicly disclosed, though no active exploitation or widely available exploit tools like Metasploit or Nuclei have been identified. Despite public disclosure, there is currently minimal community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0CPE matchmatch criteria | cpe:2.3:a:magesh-k21:online-college-event-hall-reservation-system:1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.