CVE-2024-35350

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=borrow/viewborrow. Manipulating the argument id can result in SQL injection...

CVE-2024-35350

The CVE-2024-35350 entry concerns Diño Physics School Assistant v2.3. A SQL injection vulnerability exists in the code handling the endpoint /admin/?page=borrow/view_borrow, triggered by manipulating the id parameter. Affected component is the admin borrow viewing logic; root cause is unvalidated...