Student Attendance Management System SQL Injection Vulnerability

Multiple SQL injection vulnerabilities have been identified in the Student Attendance Management System version 1. These vulnerabilities exist in the 'createClassArms.php' file, specifically within the 'classId' and 'classArmName' parameters. An attacker can exploit these vulnerabilities remotely to manipulate SQL queries, potentially leading to unauthorized data access or arbitrary code execution.

Impact

Exploitation of these vulnerabilities allows for SQL injection, which could be used to execute arbitrary SQL commands, potentially leading to unauthorized data access or manipulation. In this case, according to the discoverer, the SQL injection could be exploited to execute arbitrary code.