Itsourcecode Online Student Enrollment System SQL Injection Vulnerability

A SQL injection vulnerability exists in the scheduleSubList.php file of itsourcecode Online Student Enrollment System version 1.0. The vulnerability arises because the 'subjcode' parameter is directly inserted into the SQL query using string interpolation, without any proper sanitization or validation.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate the SQL query to execute arbitrary SQL code. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.