CVE-2024-3522 Campcodes Online Event Management System process.php sql injection

A vulnerability classified as critical has been found in Campcodes Online Event Management System 1.0. This affects an unknown part of the file /api/process.php. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-3522

Campcodes Online Event Management System 1.0 is affected by a SQL injection in /api/process.php via the userId parameter. Root cause: improper handling of user-supplied input leads to injection. Impact is described as high for confidentiality, integrity, and availability, with remote exploitation...