A vulnerability classified as critical has been found in lahirudanushka School Management System 1.0.0/1.0.1. This affects an unknown part of the file /attendancelist.php of the component Attendance Report Page. The manipulation of the argument aid leads to sql injection.
This vulnerability is uniquely identified as CVE-2024-6274. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
