≤ 1.3
tonyy dormsystem through 1.3 allows SQL Injection in admin.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.