Zhongzhicong1998

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Leave Management System version 1.0 **Description** An issue exists in the processing of the '/admin/?page=reports' endpoint. Manipulation of the `date start` and `date end` variables allows for remote SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Car Driving School Management System version 1.0 **Description** A security flaw allows remote attackers to perform SQL injection, a technique used to manipulate database queries. The issue exists within an unknown function in the `/classes/Master.php?f=save enrollment` endpoint. **Recommendations** As a temporary workaround, restrict access to the `/classes/Master.php?f=save enrollment` endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.