Vulnerability history

Authenticated (Administrator+) SQL Injection vulnerability

Missing Authorization to Arbitrary User Deletion vulnerability

Authenticated (Parent+) SQL Injection vulnerability

Authenticated (Teacher+) SQL Injection vulnerability

Missing Authorization to Privilege Escalation via Account Takeover vulnerability

Authenticated (Student/Parent+) SQL Injection vulnerability

Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation vulnerability

Teacher+ SQLi vulnerability

Cross-Site Request Forgery vulnerability

Broken Access Control vulnerability

Multiple Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated SQL Injections (SQLi) vulnerabilities

Reflected Cross-Site Scripting (XSS) vulnerability