Simple E-Learning System SQL Injection Vulnerability (CNVD-2023-11438)

Simple E-Learning System is a simple e-learning system from Carlo Montero’s personal developer. Simple E-Learning System is vulnerable to SQL injection, which stems from a missing validation of external input SQL statements in the parameter post_id of the file comment_frame.php. statement. An attacker could use this vulnerability to execute illegal SQL commands to steal database data.