| Titel | https://code-projects.org/ College Management System In PHP With Source Code 11 SQL Injection |
|---|
| Beschreibung | Root Cause
A SQL injection vulnerability was found in the 'login.php' file of the 'College Management System In PHP With Source Code ' project. The reason for this issue is that attackers inject malicious code from the parameter "user_id和Password" and use it directly in SQL queries without appropriate cleaning or validation. This allows attackers to forge input values, thereby manipulating SQL queries and performing unauthorized operations.
|
|---|
| Quelle | ⚠️ https://github.com/65241/cve/issues/2 |
|---|
| Benutzer | rootme30 (UID 74919) |
|---|
| Einreichung | 19.09.2024 21:24 (vor 2 Jahren) |
|---|
| Moderieren | 20.09.2024 10:12 (13 hours later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 274138 [code-projects College Management System 1.0 Login Page login.php email/password SQL Injection] |
|---|
| Punkte | 0 |
|---|