| Titel | code-projects Student Information System 2.0 SQL Injection |
|---|
| Beschreibung | In the searchquery.php file of Student Information System, theuser s parameter is obtained, and the SQL statement is concatenated to the SQL statement without filtering the execution, resulting in SQL injection vulnerabilities and server permissions |
|---|
| Quelle | ⚠️ https://github.com/asd1238525/cve/blob/main/SQL12.md |
|---|
| Benutzer | 936803842 (UID 91043) |
|---|
| Einreichung | 02.11.2025 09:43 (vor 9 Monaten) |
|---|
| Moderieren | 15.11.2025 07:57 (13 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 332566 [code-projects Student Information System 2.0 /searchquery.php SQL Injection] |
|---|
| Punkte | 17 |
|---|