SQL Injection Vulnerability in Attendance Management System by SourceCodester
CVE-2021-44280

9.8CRITICAL

Key Information:

Vendor: Attendance Management System Project
Status: Attendance Management System
Vendor: CVE Published:; 1 December 2021

🔔 Create Attendance Management System Project Vulnerability Alert

What is CVE-2021-44280?

The Attendance Management System version 1.0 by SourceCodester contains a SQL injection vulnerability located in the admin/incFunctions.php file. This vulnerability arises from improper input validation in the makeSafe function, allowing an attacker to manipulate SQL queries. Exploitation of this flaw may lead to unauthorized access, data leaks, and potentially serious implications for the integrity of the database and sensitive information stored within.