Student Attendance Management System SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the Student Attendance Management System version 1. The issue arises in the 'createClassTeacher.php' file, where the 'emailAddress' parameter is not properly sanitized before being used in SQL queries. This flaw allows remote attackers to manipulate the database, potentially leading to unauthorized data access or modification.

Impact

Exploitation of this vulnerability could allow attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access, data manipulation, or in some cases, executing arbitrary code on the server.