3 matches found
CVE-2024-33404
A SQL injection vulnerability in /model/addstudentfirstpayment.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter...
CVE-2024-33404
A SQL injection vulnerability in /model/addstudentfirstpayment.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter...
CVE-2024-33404
CVE-2024-33404 describes a SQL injection in campcodes Complete Web-Based School Management System 1.0, via the index parameter in /model/add_student_first_payment.php. The vulnerability affects the web app’s ability to execute arbitrary SQL commands, with a CVSS 3.1 base score of 8.3 (HIGH) and i...