CVE-2022-2705

CVE-2022-2705 affects SourceCodester Simple Student Information System, with a SQL injection in admin/departments/manage_department.php via the id parameter (example input: -5756%27%20UNION%20ALL%20SELECT%20NULL,database(),user(),NULL,NULL,NULL,NULL--). Multiple sources confirm the vulnerability ...

CVE-2022-2722

CVE-2022-2722 affects SourceCodester Simple Student Information System, specifically the manage_course.php file. The vulnerability arises from unsafely handling the id parameter, enabling SQL injection via remote access. Multiple connected sources corroborate a critical flaw in this component, wi...