CVE-2024-34936

A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the month parameter...

CVE-2024-34936

The Campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection flaw in the /view/event1.php API endpoint. An attacker can exploit this vulnerability by submitting arbitrary SQL commands via the month parameter. This allows for the execution of unauthorized ...