Student Attendance Management System SQL Injection Vulnerability

Multiple SQL injection vulnerabilities have been identified in Student Attendance Management System version 1. These vulnerabilities exist in the createSessionTerm.php file, where the id, termId, and sessionName parameters are not properly sanitized before being used in SQL queries. This lack of sanitation allows remote attackers to manipulate the application's database, potentially leading to unauthorized data access or modification.

Impact

Exploitation of these vulnerabilities allows for SQL injection, which could be used to execute arbitrary SQL commands. This could lead to unauthorized data access, data manipulation, or in some cases, executing arbitrary code on the server.