Anglemsg

A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0. This issue affects some unknown processing of the file /society/check student.php. The manipulation of the argument student id leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file User Login.php. The manipulation of the argument email results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.

**Name of the Vulnerable Software and Affected Versions** CodeAstro Online Classroom version 1.0 **Description** Remote SQL injection is possible due to improper handling of the `aid` argument within the '/OnlineClassroom/loginlinkadmin.php' endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.