CVE-2024-34927

A SQL injection vulnerability exists in the /model/update_classroom.php component of Campcodes Complete Web-Based School Management System 1.0 . This flaw allows an attacker to execute arbitrary SQL commands by exploiting the name parameter . The vulnerability is classified under CWE-89 (Improper...