Student Attendance Management System SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the Student Attendance Management System version 1. The issue resides in the 'index.php' file, where the 'username' parameter is not properly sanitized before being used in SQL queries. This lack of sanitation allows remote attackers to manipulate database queries, potentially leading to arbitrary code execution or unauthorized disclosure of sensitive information.

Impact

Exploitation of this vulnerability allows for SQL injection, which could be used to execute arbitrary SQL commands, potentially leading to unauthorized data access or manipulation. Additionally, according to the vulnerability's discoverer, this could allow for arbitrary code execution.