SQL Injection Vulnerability in SourceCodester Responsive E-Learning System
CVE-2020-36084
9.8CRITICAL
What is CVE-2020-36084?
A SQL injection vulnerability exists in the SourceCodester Responsive E-Learning System 1.0, which allows remote attackers to exploit the system by injecting SQL queries through the 'id' parameter in the '/elearning/delete_teacher_students.php' endpoint. This exploitation could lead to unauthorized access to the database, potentially allowing attackers to manipulate, retrieve, or delete sensitive information.