CVE-2020-36084

Name of the Vulnerable Software and Affected Versions: SourceCodester Responsive E-Learning System version 1.0

Description: The issue allows remote attackers to inject a SQL query in the id field of the "/elearning/delete teacher students.php?id=" endpoint. This enables attackers to execute unauthorized SQL commands.

Recommendations: For SourceCodester Responsive E-Learning System version 1.0, consider disabling the id field in the "/elearning/delete teacher students.php?id=" endpoint until a patch is available. Restrict access to the delete teacher students.php module to minimize the risk of exploitation. Avoid using the id parameter in the affected API endpoint until the issue is resolved.