CVE-2024-33405: SQL Injection

Published May 6, 2024

Updated

SQL injection vulnerability in addfriends.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the friendindex parameter.

Affected Software

2 affected components

Campcodes School Management Software

Campcodes School Management Software=1.0

Event History

May 6, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-33405?

CVE-2024-33405 is classified as a high-severity SQL injection vulnerability that can allow attackers to execute arbitrary SQL commands.

How do I fix CVE-2024-33405?

To fix CVE-2024-33405, validate and sanitize user inputs for the 'friend_index' parameter and implement proper parameterized queries or prepared statements.

Which software is affected by CVE-2024-33405?

CVE-2024-33405 affects Campcodes Complete Web-Based School Management System version 1.0.

What type of vulnerability is CVE-2024-33405?

CVE-2024-33405 is an SQL injection vulnerability that allows attackers to manipulate SQL queries.

Can CVE-2024-33405 lead to data breaches?

Yes, exploiting CVE-2024-33405 can potentially lead to unauthorized access to sensitive data stored in the database.