Kklove

**Name of the Vulnerable Software and Affected Versions** code-projects Online Course Registration version 1.0 **Description** A flaw exists in code-projects Online Course Registration 1.0 that allows for SQL injection. The issue is located in the file `/admin/edit-course.php` and involves manipulation of the `coursecode` argument. This can be exploited remotely. The exploit is publicly available. **Recommendations** Apply input validation and sanitization to the `coursecode` argument in the `/admin/edit-course.php` file.