Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_id' parameter of the add_classes.php resource does not validate the characters received and they are sent unfiltered to the database.
| Software | From | Fixed in |
|---|---|---|
| projectworlds / student_result_management_system | 1.0 | 1.0.x |