Guanyingxin

**Name of the Vulnerable Software and Affected Versions** Scholars Tracking System version 1.0 **Description** A SQL injection issue exists in Scholars Tracking System 1.0. The issue is located in the `/admin/delete user.php` file, specifically within an unknown function. Manipulation of the `ID` argument can trigger the SQL injection. This allows for remote exploitation. The exploit has been publicly disclosed. **Recommendations** Apply updates to address the SQL injection issue in the `/admin/delete user.php` file. As a temporary workaround, restrict access to the `/admin/delete user.php` file. Sanitize the `ID` parameter before using it in SQL queries.

**Name of the Vulnerable Software and Affected Versions** code-projects Scholars Tracking System version 1.0 **Description** A weakness exists in code-projects Scholars Tracking System 1.0. The issue involves a SQL injection affecting an unknown function within the `/delete post.php` file. Manipulation of the `ID` argument can trigger the SQL injection. Remote exploitation is possible, and the exploit has been publicly released. **Recommendations** code-projects Scholars Tracking System version 1.0: As a temporary workaround, consider restricting access to the `/delete post.php` file until a patch is available.

**Name of the Vulnerable Software and Affected Versions** code-projects Scholars Tracking System version 1.0 **Description** A security issue exists in code-projects Scholars Tracking System 1.0. Manipulation of the `post content` argument within a file, `/home.php`, can lead to SQL injection. This issue is remotely exploitable and has been publicly disclosed. The vulnerable element is an unknown function within the `/home.php` file. **Recommendations** Apply any available updates to address the SQL injection issue in the `/home.php` file. As a temporary workaround, consider restricting or sanitizing the `post content` argument to prevent SQL injection attacks.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Blood Donor Management System version 1.0 **Description** A flaw exists in code-projects Simple Blood Donor Management System version 1.0 that allows for remote SQL injection. The issue is located in the `/editedcampaign.php` file, specifically through manipulation of the `campaignname` argument within an unknown function. The exploit for this issue is publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.