A vulnerability was found in School Management System bae5aa. It has been classified as critical. Affected is an unknown function of the file substaff.php. The manipulation of the argument medium leads to sql injection.
This vulnerability is traded as CVE-2024-42575. It is possible to launch the attack remotely. Furthermore, there is an exploit available.