Student Enrollment
Monthly
SQL injection in Code-projects Student Enrollment System 1.0 allows unauthenticated remote attackers to inject SQL via the Username parameter in login.php, potentially leading to data theft or authentication bypass. Publicly available exploit code exists, but no active exploitation has been confirmed by CISA KEV. The EPSS score is very low, suggesting limited real-world exploitation likelihood.
SQL injection in Code-projects Student Enrollment System 1.0 allows unauthenticated remote attackers to inject SQL via the Username parameter in login.php, potentially leading to data theft or authentication bypass. Publicly available exploit code exists, but no active exploitation has been confirmed by CISA KEV. The EPSS score is very low, suggesting limited real-world exploitation likelihood.