CVE-2024-54921

CVE-2024-54921 is a critical SQL Injection vulnerability affecting kashipara E-learning Management System v1.0, specifically in the /student_signup.php component. This flaw allows unauthenticated remote attackers to execute arbitrary SQL commands by manipulating the username, firstname, lastname, and class_id parameters, leading to unauthorized database access. With a CVSS score of 9.8 (Critical), it presents a low-complexity attack vector with no user interaction required, enabling full compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.