CVE-2024-24092

The Scholars Tracking System version 1.0 by Fabian Ros is vulnerable to SQL Injection due to a lack of validation of externally entered SQL statements. Attackers can exploit this via the login.php endpoint to execute illegal SQL commands, which may lead to stealing sensitive database data or runn...