VULNERABILITY INTELLIGENCE

CVE-2024-33805

CVSS score9.8 CRITICAL

EPSS probability0.51%

CISA KEVNot currently listed

Published2024-05-28

Last modified2026-06-17

Description

A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.