SQL Injection Vulnerability in Campcodes Complete Web-Based School Management System

CVE-2024-33805

Summary

A vulnerability has been identified in the Complete Web-Based School Management System developed by Campcodes that allows attackers to exploit SQL injection via the id parameter in the get_student.php file. This flaw enables unauthorized execution of arbitrary SQL commands, potentially compromising the application's database. Attackers can manipulate the SQL queries to gain access to sensitive data, modify records, or even take control of the underlying database system. It is crucial for users of this web application to address this vulnerability promptly to safeguard their systems against potential exploitation.

References