CVE-2024-33402

A SQL injection vulnerability in /model/approvepettycash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33402

A SQL injection vulnerability in /model/approvepettycash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33402

The campcodes Complete Web-Based School Management System version 1.0 is susceptible to a SQL injection vulnerability located in the /model/approve_petty_cash.php API endpoint. The root cause is the improper neutralization of special elements in the id parameter, which allows an attacker to execu...