CVE-2024-6279

The CVE-2024-6279 issue affects lahirudanushka School Management System v1.0.0–v1.0.1, in the Exam Results Page’s file examresults-par.php. The root cause is a SQL injection triggered by manipulating the sid argument, allowing remotely executable exploits. Publicly disclosed exploitation vectors ...

CVE-2024-6279: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file examresults-par.php of the component Exam Results Page. The manipulation of the argument sid leads to sql injection. The...