Cxaqhq

A critical issue has been found in the SourceCodester Loan Management System, affecting the file login.php. The manipulation of the `username` argument leads to SQL injection. This issue can be initiated remotely.

A critical issue has been found in the component POST Parameter Handler, where the manipulation of the `shift` argument leads to SQL injection. The attack can be initiated remotely.

A problematic issue was found in the SourceCodester Online Admission System, affecting an unknown function of the file index.php. The manipulation of the `eid` argument with a malicious input, such as `8</h3><script>alert(1)</script>`, leads to cross-site scripting. This issue can be exploited remotely.

The issue is related to a command execution vulnerability in the goahead component.