CVE-2021-28423

CVE-2021-28423 affects Teachers Record Management System 1.0 through 2.1, with SQL injection via editid (in edit-subjects-detail.php, edit-teacher-detail.php) and searchdata (in search.php). The root cause is improper handling of user-supplied input leading to arbitrary SQL execution by remote au...