PT-2024-16870 · Sourcecodester · Sourcecodester Student Management System

Polaris0X1 · Published 2024-11-15 · Updated 2024-11-18 · CVE-2024-11262

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Student Record Management System version 1.0

Description A critical vulnerability has been found in the SourceCodester Student Record Management System, affecting the main function of the component View All Student Marks. The manipulation leads to a stack-based buffer overflow. It is possible to launch the attack on the local host.

Recommendations For SourceCodester Student Record Management System version 1.0, consider disabling the main function of the View All Student Marks component until a patch is available to prevent exploitation of the stack-based buffer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-121

CWE-119

Related Identifiers

CVE-2024-11262

Affected Products

Sourcecodester Student Management System

References · 11

• 🔥 https://github.com/Hacker0xone/CVE/issues/13 · Exploit
• https://osv.dev/vulnerability/CVE-2024-11262 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-11262 · Security Note
• https://twitter.com/CVEnew/status/1857557103038312838 · Twitter Post
• https://vuldb.com/?submit.443950 · Note
• https://t.me/cvedetector/11200 · Telegram Post
• https://vuldb.com/?id.284719 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/?ctiid.284719 · Note
• https://t.me/cvenotify/101876 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1857650708490649867 · Twitter Post