CVE-2024-33801

A SQL injection vulnerability in /model/getsubjectrouting.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33801

The campcodes Complete Web-Based School Management System version 1.0 is susceptible to a SQL injection vulnerability located in the /model/get_subject_routing.php API endpoint. An attacker can exploit this flaw by providing malicious input via the id parameter to execute arbitrary SQL commands ....