PT-2018-14667

Name of the Vulnerable Software and Affected Versions School Equipment Monitoring System version 1.0 Description The issue allows SQL injection via the login screen, related to include/user.vb. Recommendations For School Equipment Monitoring System version 1.0, consider restricting access to the...

CVE-2018-18806: Improper Neutralization of Special Elements used in an SQL Command

School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...