← CVE Intelligence

CVE-2024-33974

SQL injection in Janobe products PUBLISHED

Description (CNA)

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Users in '/report/printlogs.php' parameter.

Affected (CNA)

Vendor / productVersions
Janobe / School Attendance Monitoring Systemaffected 1.0
Janobe / chool Event Management Systemaffected 1.0

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.