Name of the Vulnerable Software and Affected Versions:

Phpgurukul Pre-School Enrollment System version 1.0

Description:

The software contains a SQL injection vulnerability in the `/admin/password-recovery.php` file. This is due to insufficient validation of user input for the `username` parameter.

Recommendations:

Ensure proper validation of the `username` parameter in the `/admin/password-recovery.php` file to prevent SQL injection attacks.