Threats tagged 'ghsa-g79x-4qm3-4xp7'

Campcodes School File Management version 1.0 contains a SQL injection vulnerability in the /admin/update_user.php file. The flaw arises from manipulation of the user_id parameter, allowing remote attackers to execute unauthorized SQL commands. Public exploit code is available, increasing the risk of exploitation. The vulnerability has a medium severity rating with a CVSS score of 4.7.