PT-2021-16460

Name of the Vulnerable Software and Affected Versions: SourceCodester Alumni Management System version 1.0 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL statements. This is achieved via the id parameter to the "manage event.php" endpoint. Recommendations: For...

PT-2021-16458

Name of the Vulnerable Software and Affected Versions: SourceCodester Alumni Management System version 1.0 Description: The issue allows attackers to execute arbitrary code through an arbitrary file upload vulnerability. This is achieved by uploading a file to the manage event.php API endpoint...