CVE:CVE-2023-1099
CNNVD:CNNVD-202302-2437
Student Management System是孟加拉国Sk.Amir Hamza个人开发者的一个简单的基于网络的学生管理软件。
SourceCodester Online Student Management System 1.0版本存在SQL注入漏洞，该漏洞源于文件eduauth/edit-class-detail.php?editid=1存在问题，对参数editideditid的操作会导致sql注入。
solution:Upgrade online_student_management_system_project online_student_management_system to a higher version than 1.0,and avoid the version 1.0