CVE-2024-4905

CVE-2024-4905 is a critical SQL injection vulnerability affecting Kashipara College Management System 1.0, specifically within the view_students_each_detail.php file when handling the 'id' argument. This flaw allows for remote exploitation, enabling an attacker to compromise the system. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability. While the exploit has been publicly disclosed, there is currently no evidence of active exploitation, nor are there readily available Metasploit or Nuclei modules, and it has garnered minimal community discussion or media coverage.