CVE-2024-33405

CVE-2024-33405 concerns the Campcodes Complete Web-Based School Management System 1.0. The vulnerability is an SQL injection in the add_friends.php script, exploitable via the friend_index parameter, allowing an attacker to execute arbitrary SQL commands. The description across connected document...