PT-2014-4266

Name of the Vulnerable Software and Affected Versions Command School Student Management System version 1.06.01 Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to various PHP files, including "admin school names.php", "admin...