SQL Injection Vulnerability in Campcodes Complete Web-Based School Management System
CVE-2024-33806
9.8CRITICAL
What is CVE-2024-33806?
A serious SQL injection vulnerability exists within the '/model/get_grade.php' file of Campcodes Complete Web-Based School Management System version 1.0. This flaw enables attackers to manipulate SQL queries through the 'id' parameter, potentially granting them unauthorized access to the database. If exploited, this vulnerability could lead to the execution of arbitrary SQL commands, allowing attackers to alter, delete, or extract sensitive data from the database, posing significant risks to the confidentiality, integrity, and availability of the affected system.