CVE-2024-33807

A SQL injection vulnerability in /model/getteachertimetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter...

PT-2024-25494 · Unknown · Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Complete Web-Based School Management System version 1.0 Description: A SQL injection issue allows an attacker to execute arbitrary SQL commands via the grade parameter in the "/model/get teacher timetable.php" API endpoint. Recommendations: F...