CVE-2024-33802

A SQL injection vulnerability exists in the campcodes Complete Web-Based School Management System version 1.0 . The flaw is located in the /model/get_student_subject.php file within the "index" API endpoint. An attacker can exploit this by manipulating the index parameter to execute arbitrary SQL...