CVE-2024-34931

The Campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection flaw in the /model/update_subject.php file. An attacker can exploit this by sending malicious input via the name parameter to execute arbitrary SQL commands. This vulnerability could lead to una...