Security Advisory
CVE-2019-16264
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
In Escuela de Gestion Publica Plurinacional (EGPP) Sistema Integrado de Gestion Academica (GESAC) v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attackers to access the database.