SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the LessonID parameter.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')