{"id":"CVE-2024-11097","aliases":["EUVD-2024-33649","GHSA-vc27-rq8h-9f48"],"status":"published","title":"SourceCodester Student Record Management System Main Menu infinite loop","description":"A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulation leads to infinite loop. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.","severity":{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00277,"percentile":0.20301,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-404","CWE-835"],"published":"2024-11-12T02:00:13Z","modified":"2026-06-17T06:57:03Z","products":[{"vendor":"phpgurukul","product":"student record management system"},{"vendor":"razormist","product":"student_record_management_system"},{"vendor":"sourcecodester","product":"student record management system"},{"vendor":"sourcecodester","product":"student_record_management_system"}],"references":[{"url":"https://vuldb.com/?id.283918","tags":["vdb-entry","Permissions Required"]},{"url":"https://vuldb.com/?ctiid.283918","tags":["signature","permissions-required","Permissions Required"]},{"url":"https://vuldb.com/?submit.441237","tags":["third-party-advisory","Third Party Advisory"]},{"url":"https://github.com/Hacker0xone/CVE/issues/5","tags":["exploit","issue-tracking","Exploit","Third Party Advisory"]},{"url":"https://www.sourcecodester.com/","tags":["product","Product"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11097"},{"url":"https://www.sourcecodester.com"},{"url":"https://github.com/advisories/GHSA-vc27-rq8h-9f48"}],"sources":{"cve":[{"id":"CVE-2024-11097","title":"SourceCodester Student Record Management System Main Menu infinite loop","description":"A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulation leads to infinite loop. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.","status":"published","published":"2024-11-12T02:00:13.839Z","modified":"2024-11-12T15:57:10.398Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"},{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","assessor":"cna"}],"cwes":["CWE-835","CWE-404"],"updated_at":"2026-11-02T14:34:19.615831Z"}],"euvd":[{"id":"EUVD-2024-33649","description":"A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulation leads to infinite loop. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.","status":"published","published":"2024-11-12T02:00:13Z","modified":"2024-11-12T15:57:10Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-03T00:05:04.420026Z"}],"ghsa":[{"id":"GHSA-vc27-rq8h-9f48","title":"A vulnerability has been found in SourceCodester Student Record Management System 1.0 and...","description":"A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulation leads to infinite loop. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.","status":"published","published":"2024-11-12T03:30:48Z","modified":"2024-11-14T15:33:23Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-404","CWE-835"],"updated_at":"2026-11-02T14:58:50.242407Z"}],"nvd":[{"id":"CVE-2024-11097","description":"A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulation leads to infinite loop. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.","status":"published","published":"2024-11-12T02:15:17.817Z","modified":"2026-06-17T06:57:03.34Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","level":"low","assessor":"secondary"}],"cwes":["CWE-404","CWE-835"],"updated_at":"2026-11-02T14:10:36.931115Z"}]}}