CVE-2024-12929

Name of the Vulnerable Software and Affected Versions code-projects Student Management System version 1.0.00

Description A critical issue has been found in the code-projects Student Management System, affecting unknown code in the /addCatController.php file. The manipulation of the argument size leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Recommendations For version 1.0.00, consider disabling the addCatController.php file or restricting access to it until a patch is available. As a temporary workaround, avoid using the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.