CVE-2024-33805

The campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection vulnerability. An attacker can execute arbitrary SQL commands by exploiting the id parameter within the /model/get_student.php API endpoint. To mitigate this risk, it is recommended to restrict ...