إرسال #333879: sourcecodester School Intramurals-Student Attendance Management System v1.0 SQL injectionالمعلومات

عنوانsourcecodester School Intramurals-Student Attendance Management System v1.0 SQL injection
الوصفIn-school - Student Attendance Management System 1.0 is vulnerable to unrestricted SQL injection attacks via /intrams_sams/manage_student.php, the controllable parameter is: id. This function brings the id parameter into the SQL statement for execution without any restrictions. A malicious attacker could exploit this vulnerability to obtain sensitive information in the server database.
المصدر⚠️ https://github.com/Hefei-Coffee/cve/blob/main/sql7.md
المستخدم Hefei-Coffee (UID 68557)
ارسال14/05/2024 01:44 PM (2 سنوات منذ)
الاعتدال15/05/2024 02:05 PM (1 day later)
الحالةتمت الموافقة
إدخال VulDB264462 [SourceCodester School Intramurals Student Attendance Management System manage_student.php حقن SQL]
النقاط20

Want to stay up to date on a daily basis?

Enable the mail alert feature now!