Vkk6

**Name of the Vulnerable Software and Affected Versions** sambitraj Student-Management-System versions up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 **Description** A remote SQL injection exists within the Dashboard component. This occurs when the `roll no` or `teacher name` arguments are manipulated, allowing an attacker to interfere with the database queries. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** sambitraj Student-Management-System versions up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 **Description** A remote SQL injection flaw exists within the Management Mutation Handler component. This issue occurs when the application improperly handles the `roll no`, `name`, `father name`, `class`, `mobile`, `email`, `password`, or `remark` arguments, allowing an attacker to execute arbitrary SQL commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.