itsourcecode Online Student Enrollment System SQL Injection Vulnerability in assignInstructorSubjects.php

A SQL injection vulnerability exists in the assignInstructorSubjects.php file of itsourcecode Online Student Enrollment System version 1.0. This vulnerability allows attackers to inject malicious code through the 'subjcode' parameter, which is then executed in SQL queries without proper sanitization or validation.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.