TI-2018-15388 CVE-2018-25163 · GHSA-2p4h-vppg-wjv6
BitZoom 1.0 SQL Injection via rollno Parameter
Priority HIGH 77
BitZoom 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the rollno and username parameters in forgot.php and login.ph…