School Faculty Scheduling System SQL Injection Vulnerability (CNVD-2023-64628)

School Faculty Scheduling System is a school faculty scheduling system. A SQL injection vulnerability exists in School Faculty Scheduling System v1.0, which stems from a lack of validation of externally entered SQL statements in the parameter id of manage_user.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitive database data.