CVE-2024-6278 | lahirudanushka School Management System 1.0.0/1.0.1 Subject Page subject.php update sql injection

A vulnerability has been found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file subject.php of the component Subject Page. The manipulation of the argument update leads to sql injection.

This vulnerability is known as CVE-2024-6278. The attack can be launched remotely. Furthermore, there is an exploit available.