An attacker can exploit multiple vulnerabilities in BigBlueButton to display false information and perform an SQL Injection attack.