Lzz0403

**Name of the Vulnerable Software and Affected Versions** QueryMine sms versions up to 7ab5a9ea196209611134525ffc18de25c57d9593 **Description** A SQL injection flaw exists in the GET Request Parameter Handler component within the 'admin/deletecourse.php' file. A remote attacker can trigger this issue by manipulating the `ID` argument. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to view, modify, or delete data from the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.