CVE-2024-33405

The campcodes Complete Web-Based School Management System 1.0 is susceptible to an SQL injection vulnerability in the add_friends.php file. An attacker can exploit this flaw by providing malicious input through the friend_index parameter to execute arbitrary SQL commands. No specific remediation ...