SQL Injection Vulnerability in Campcodes Complete Web-Based School Management System
CVE-2024-5104
8.8HIGH
What is CVE-2024-5104?
A critical SQL injection vulnerability has been identified within the Campcodes Complete Web-Based School Management System version 1.0. This vulnerability specifically resides in the file /view/student_grade_wise.php, where improper handling of user inputs allows attackers to manipulate the 'grade' argument. This exploitation method can lead to unauthorized access to the application's database, enabling attackers to execute arbitrary SQL commands remotely. Given the public disclosure of this vulnerability, it poses a serious threat to the operational security of educational institutions using this software, potentially compromising sensitive student and academic data.