CVE-2024-5237
📋 TL;DR
This critical SQL injection vulnerability in Campcodes Complete Web-Based School Management System 1.0 allows attackers to manipulate database queries through the 'grade' parameter in the /view/timetable_grade_wise.php file. Attackers can potentially read, modify, or delete sensitive school data including student records, grades, and personal information. All users running the vulnerable version are affected.
💻 Affected Systems
- Campcodes Complete Web-Based School Management System
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Complete database compromise leading to data theft, data destruction, or full system takeover via SQL injection to RCE escalation.
Likely Case
Unauthorized access to sensitive student and staff data, grade manipulation, or system disruption.
If Mitigated
Limited impact with proper input validation and database permissions in place.
🎯 Exploit Status
Exploit details are publicly available in GitHub repositories; SQL injection is straightforward to weaponize.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Unknown
Vendor Advisory: None found
Restart Required: No
Instructions:
No official patch available. Implement workarounds or consider alternative software.
🔧 Temporary Workarounds
Input Validation and Sanitization
allAdd parameter validation and SQL injection filtering for the 'grade' parameter
Modify /view/timetable_grade_wise.php to validate and sanitize user input before database queries
Web Application Firewall (WAF)
allDeploy WAF rules to block SQL injection patterns
Configure WAF to block requests containing SQL keywords in the grade parameter
🧯 If You Can't Patch
- Isolate the system behind a firewall with strict access controls
- Implement database user with minimal privileges (read-only if possible)
🔍 How to Verify
Check if Vulnerable:
Test the /view/timetable_grade_wise.php endpoint with SQL injection payloads in the grade parameterCheck Version:
Check system documentation or about page for version informationVerify Fix Applied:
Test that SQL injection payloads no longer execute and return appropriate error messages📡 Detection & Monitoring
Log Indicators:
- Unusual database queries from web server
- SQL error messages in web logs
- Multiple failed login attempts following SQL errors
Network Indicators:
- HTTP requests to /view/timetable_grade_wise.php with SQL keywords in parameters
SIEM Query:
source="web_logs" AND uri="/view/timetable_grade_wise.php" AND (param="grade" AND value CONTAINS "UNION" OR value CONTAINS "SELECT" OR value CONTAINS "OR 1=1")🔗 References
- https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2027.pdf
- https://vuldb.com/?ctiid.265988
- https://vuldb.com/?id.265988
- https://vuldb.com/?submit.339813
- https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2027.pdf
- https://vuldb.com/?ctiid.265988
- https://vuldb.com/?id.265988
- https://vuldb.com/?submit.339813
