Student Result Management System /notice-details.php File SQL Injection Vulnerability

Student Result Management System is a student result management system. Student Result Management System suffers from a SQL injection vulnerability that stems from an error in the parameter nid in the file /notice-details.php that lacks validation of externally entered SQL statements. An attacker...

CVE-2022-42021: Improper Neutralization of Special Elements used in an SQL Command

Best Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult/notice-details.php?nid=...