CVE-2024-33804

The campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection vulnerability in the /model/get_subject.php API endpoint. An attacker can exploit this by providing malicious input via the id parameter to execute arbitrary SQL commands. To minimize the risk o...