| عنوان | SourceCodester Simple E-learning System 1.0 SQL Injection |
|---|
| الوصف | A SQL injection vulnerability exists in Simple E-learning System version 1.0. The vulnerability occurs in the user profile update component, where the firstName HTTP POST parameter is not properly sanitized. This allows an authenticated attacker to inject arbitrary SQL commands. |
|---|
| المصدر | ⚠️ https://github.com/meifukun/Web-Security-PoCs/blob/main/Simple-E-learning-System/SQLi-UserProfile-firstName.md |
|---|
| المستخدم | 563742137abc (UID 95813) |
|---|
| ارسال | 08/03/2026 03:47 PM (3 أشهر منذ) |
|---|
| الاعتدال | 22/03/2026 09:48 AM (14 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 352411 [SourceCodester Simple E-learning System 1.0 User Profile Update firstName حقن SQL] |
|---|
| النقاط | 18 |
|---|