School Dormitory Management System SQL Injection Vulnerability (CNVD-2022-66687)

School Dormitory Management System is a school dormitory management system. SQL injection vulnerability exists in School Dormitory Management System v1.0, which originates from /dms/admin/reports/daily_collection The _report.php parameter lacks validation for external input SQL statements. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.