Yuancoffee

A flaw exists in Simple Attendance Record System 2.0 where manipulation of the `student` argument in the `/check.php` file can lead to SQL injection. This issue affects an unknown function within the file. Remote exploitation is possible, and details about the exploit have been publicly released.

A flaw exists in code-projects Question Paper Generator that allows for SQL injection. The issue is located in the `/selectquestionuser.php` file, specifically through manipulation of the `subid` argument. Remote exploitation is possible.