Campcodes School Log Management System
A flaw exists in Campcodes School File Management System that allows for SQL injection. The issue is related to the manipulation of the `stud id` argument within the /update query.php file and an unknown function. This can be exploited remotely. The exploit is publicly available.