K0Xx11

The issue is related to SQL Injection, which can be exploited via the "/gasmark/editbrand.php?id=" endpoint. The `id` variable is vulnerable to injection attacks.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `id` parameter at the "/librarian/dele.php" API endpoint.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `RollNo` parameter at the "/librarian/delstu.php" API endpoint.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `bookId` parameter at the "/librarian/delete.php" API endpoint.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `RollNo` parameter at the "/admin/delstu.php" API endpoint.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `bookId` parameter at the "/admin/delete.php" API endpoint.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `M Id` parameter at the "/admin/del.php" API endpoint.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `Section` parameter at the "/staff/lab.php" API endpoint.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `month` parameter at the "/admin/?page=reports/stockin&month=" endpoint.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `id` parameter at the "/staff/edit book details.php" API endpoint.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `id` parameter at the "/admin/?page=user/manage user&id=" endpoint.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `Section` parameter at the "/librarian/lab.php" API endpoint.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `id` parameter at the "/staff/bookdetails.php" API endpoint.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `id` parameter at the "/staff/studentdetails.php" API endpoint.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `month` parameter at the "/admin/?page=reports/stockout&month=" endpoint.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `month` parameter at the "/admin/?page=reports/waste&month=" endpoint.

The issue allows for arbitrary file deletion via the /classes/Master.php component, specifically through the `f` parameter set to `delete img`.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `Id` parameter at the "/student/bookdetails.php" API endpoint. It allows a remote attacker to execute arbitrary SQL queries.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `Id` parameter at the "/stocks/manage stockout.php" API endpoint. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `Id` parameter at the "/stocks/manage waste.php" API endpoint.