SQL Injection Vulnerability in Admin Login Page

CVE-2024-41236

What is CVE-2024-41236?

A SQL injection vulnerability has been identified in the Kashipara Responsive School Management System, specifically in the admin_login.php file located in the /smsa/ directory. The flaw allows attackers to manipulate the application's SQL execution through the 'username' parameter of the Admin Login Page, potentially enabling unauthorized access and data breach. This vulnerability poses significant risks to the integrity and confidentiality of sensitive administrative data, warranting immediate attention and remediation.

References