CVE-2022-32373

The CVE-2022-32373 entry describes a SQL Injection vulnerability in itsourcecode Advanced School Management System v1.0, exploitable through the parameter id in /school/model/get_exam.php. The root cause is unsanitized external input leading to SQL command execution, enabling access to sensitive ...