Security Advisory

CVE-2024-54924

9.8
CRITICAL

Vulnerability Description

A SQL Injection was found in /admin/edit_content.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the title and content parameters.
Published Date December 9, 2024
Official Source NIST NVD Advisory