Threats tagged 'ghsa-f269-8ph7-839v'

A SQL injection vulnerability exists in the cak-filemanagement-system affecting the mysqli_query function in admin/save_student.php. The flaw allows remote attackers to manipulate multiple parameters leading to SQL injection. Exploit code has been publicly disclosed, but the project has not issued a response or fix yet. The vulnerability is rated high severity with a CVSS score of 7.3.