Zhang Guixiang

**Name of the Vulnerable Software and Affected Versions** Online Clinic Management System In PHP With Free Source code version 1.0 **Description** The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `user` parameter at the "login.php" API endpoint. **Recommendations** For Online Clinic Management System In PHP With Free Source code version 1.0, consider restricting access to the "login.php" endpoint until a fix is available, and avoid using the `user` parameter in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Sourcecodester Online Graduate Tracer System version 1.0 **Description** The issue concerns SQL Injection via the `id` parameter in the admin/admin cs.php file. This allows for potential exploitation by injecting malicious SQL code. **Recommendations** For Sourcecodester Online Graduate Tracer System version 1.0, consider restricting access to the `id` parameter in the admin/admin cs.php file to minimize the risk of exploitation. As a temporary workaround, avoid using the `id` parameter in the affected file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.