CVE-2018-25201

The CVE-2018-25201 issue affects School Management System CMS 1.0. An SQL injection in the admin login (processlogin endpoint) via the username parameter allows bypassing authentication by sending boolean-based blind payloads, enabling login as administrator without valid credentials. The vulnera...