| عنوان | Sql injection exists for Student Management System page ID |
|---|
| الوصف | Sql injection vulnerability exists in the page ID code parameter of Student Management System, which can be exploited by attackers to obtain sensitive information and cause data leakage.
The dangers of SQL injection
Database information leakage: The leakage of user's private information stored in the database.
Web page tampering: tampering with specific web pages by manipulating the database.
The website is hacked, and malware spreads: modify the values of some fields in the database, embed the link of the network, and carry out the hacking attack.
The database was operated maliciously: the database server was attacked, and the system administrator account of the database was tampered with.
The server was remotely controlled and backdoored. Operating system support provided by the database server allows hackers to modify or control the operating system.
Destroy hard disk data and paralyze the entire system. |
|---|
| المصدر | ⚠️ https://github.com/beicheng-maker/vulns/issues/4 |
|---|
| المستخدم | cppuzhang (UID 31043) |
|---|
| ارسال | 17/08/2022 04:19 PM (4 سنوات منذ) |
|---|
| الاعتدال | 17/08/2022 08:37 PM (4 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 206634 [SourceCodester Student Management System index.php id حقن SQL] |
|---|
| النقاط | 20 |
|---|