CVE-2024-33808

A SQL injection vulnerability exists in the /model/get_timetable.php API endpoint of campcodes Complete Web-Based School Management System version 1.0 . An attacker can exploit this flaw by supplying malicious input to the id parameter to execute arbitrary SQL commands. This vulnerability could l...