| शीर्षक | CampCodes Student Grading System 1.0 SQL Injection |
|---|
| विवरण | Vendor and Product Information:
Vendor: CampCodes
Product: Student Grading System
Product URL: https://www.campcodes.com/projects/php/student-grading-system-using-php-mysql-free-download/
Confidence: Confirmed
Description:
The 'view_students.php' file directly incorporates the $_POST['id'] parameter into the SQL query without proper sanitization or validation. This lack of protection allows an attacker to modify the id parameter in the URL and inject malicious SQL, potentially enabling unauthorized access or data manipulation. |
|---|
| स्रोत | ⚠️ https://github.com/shaturo1337/POCs/blob/main/SQL%20Injection%20in%20Student%20Grading%20System.md |
|---|
| उपयोगकर्ता | John Correche (UID 79510) |
|---|
| सबमिशन | 03/01/2025 05:41 AM (2 साल पहले) |
|---|
| संयम | 03/01/2025 05:14 PM (12 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 290157 [Campcodes Student Grading System 1.0 /view_students.php id SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|