CVE-2019-16264

Name of the Vulnerable Software and Affected Versions EGPP Sistema Integrado de Gestion Academica (GESAC) version 1

Description The issue concerns a SQL injection vulnerability in the authentication form of the affected software. Specifically, the username parameter is vulnerable, allowing attackers to access the database.

Recommendations For EGPP Sistema Integrado de Gestion Academica (GESAC) version 1, consider restricting access to the authentication form until a patch is available, and avoid using the username parameter in a way that could facilitate SQL injection attacks.