Scholars Tracking System SQL Injection Vulnerability (CNVD-2024-14043)

Scholars Tracking System is a scholars tracking system by the individual developer Fabian Ros. Scholars Tracking System version 1.0 suffers from a SQL injection vulnerability that stems from the application’s lack of validation of externally entered SQL statements, which can be exploited by an attacker to execute illegal SQL commands to steal sensitive database data.