Threats tagged 'ghsa-hmgq-f5wh-35x7'

A SQL injection vulnerability exists in code-projects Student Information System 2.0 within an unknown function in /editprofile.php. This vulnerability allows remote attackers with low privileges to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability. Public exploit code is available. The vulnerability has a medium severity rating with a CVSS score of 6.3.