Security Advisory
CVE-2024-27685
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $cfullname, and $cdate variables.