Student Attendance Management System SQL Injection Vulnerability

Multiple SQL injection vulnerabilities have been identified in Student Attendance Management System version 1. These vulnerabilities exist in the createStudents.php file and involve the Id, firstname, and admissionNumber parameters, which are not properly sanitized before being used in SQL queries. This lack of sanitation allows remote attackers to execute arbitrary SQL commands.

Impact

Exploitation of these vulnerabilities could lead to unauthorized SQL command execution, potentially allowing attackers to manipulate the database or access sensitive information.