An attacker can inject malicious SQL statements through user-controlled input, allowing unauthorized access to, modification of, or disclosure of database data.
Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a privileged user account without credenti…