PHPGurukul Billing System SQL Injection Vulnerability

A SQL injection vulnerability has been identified in PHPGurukul Billing System version 1.0, specifically within the admin/index.php endpoint. The issue arises because the username parameter allows unvalidated user input, which is directly concatenated into a SQL query on the backend, creating an opportunity for attackers to manipulate the executed SQL statement.

Impact

Exploitation of this vulnerability could lead to unauthorized data retrieval from the database, bypassing authentication, or compromising the integrity of the application's database.