Zhangchao404

**Name of the Vulnerable Software and Affected Versions** itsourcecode College Management System version 1.0 **Description** A flaw exists in itsourcecode College Management System 1.0 related to the file '/admin/asign-single-student-subjects.php'. Manipulation of the `course code` argument can result in SQL injection. This attack can be carried out remotely. The exploit for this issue is publicly available. **Recommendations** Apply any available updates or patches for itsourcecode College Management System version 1.0. As a temporary workaround, restrict access to the '/admin/asign-single-student-subjects.php' file. Sanitize the `course code` input to prevent SQL injection.

**Name of the Vulnerable Software and Affected Versions** itsourcecode College Management System version 1.0 **Description** A security issue exists in itsourcecode College Management System version 1.0. The manipulation of the `teacher id` argument in the file `/admin/display-teacher.php` can lead to SQL injection. This attack is possible remotely. The exploit for this issue has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** itsourcecode College Management System version 1.0 **Description** A flaw exists in itsourcecode College Management System 1.0. The issue is due to SQL injection within the `/login/login.php` file. Manipulating the `email` argument can lead to a successful exploit. The exploit is publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.