CVE-2024-35355 — A vulnerability has been discovered in Diño Physics School Assistant version 2.3

Back Back to CVE browser

CRITICAL

A vulnerability has been discovered in Diño Physics School Assistant version 2.3

Published May 30, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.65%

Description

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_category. Manipulating the argument id can result in SQL injection.

Affected products

Vendor Dino Physics School Assistant Project Product Dino Physics School Assistant Default
n/a
- Version
  2.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dino Physics School Assistant Project

Dino Physics School Assistant

n/a

Version	Status	Constraints
2.3	affected	-

Remediation

No remediation recorded yet.

Metrics

0.65% 0.00654

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00654

Score over time

2025–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (4 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.65% (0.00654)	49.56th	v5 (v2026.06.15)
Jun 15, 2026	0.65% (0.00654)	46.28th	v5 (v2026.06.15)
Mar 17, 2025	0.18% (0.00178)	37.08th	v4 (v2025.03.14)
Feb 14, 2025	0.04% (0.00043)	11.64th	v3 (v2023.03.01)