A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=borrow/view_borrow. Manipulating the argument id can result in SQL injection.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')