CVE-2024-5394

Affected software: itsourcecode Online Student Enrollment System 1.0. The vulnerability is a SQL injection in the file newDept.php where the deptname parameter is manipulated. Root cause: unsafely handling user input leading to injection in backend SQL queries. Impact: allows remote attacker to v...