CVE-2024-33805

The campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection flaw located in the /model/get_student.php API endpoint. An attacker can exploit this vulnerability by providing malicious input via the id parameter to execute arbitrary SQL commands. Practical...