College Management System Php 1.0 - SQL Injection via Unfiltered POST Parameters
College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passing a SQL query.