Chenfu

Name of the Vulnerable Software and Affected Versions Cyber-III Student-Management-System versions up to 1a938fa61e9f735078e9b291d2e6215b4942af3f Description A SQL injection issue exists in the Parameter Handler component of Cyber-III Student-Management-System. The vulnerability is located in the `/login.php` file. Manipulation of the `Password` parameter can lead to SQL injection. The attack can be launched remotely. The exploit has been publicly disclosed. Recommendations Update to a version beyond 1a938fa61e9f735078e9b291d2e6215b4942af3f.