SourceCodester Alumni Management System 1.0 contains a sql_injection caused by unsanitized input in admin/login.php, letting attackers bypass authentication, exploit requires injection of malicious SQL payload.
id: CVE-2020-29214
info:
name: Alumni Management System 1.0 - SQL Injection
author: arafatansar
...