PT-2021-16968

Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the student information parameters to the "edit stud.php" endpoint. Th...

PT-2021-16970

Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description The issue allows remote attackers to execute arbitrary SQL statements via the id parameter to "edit stud.php". This enables attackers to manipulate database queries,...