critical9.8
CVE-2024-33974
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0.
Impact
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Users in '/report/printlogs.php' parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Janobe | School Attendence Monitoring System | Version 1.0 |
| Janobe | School Event Management System | Version 1.0 |