| शीर्षक | Abdullah-Hasan-Sajjad/Online-School web 10/13 SQL Injection |
|---|
| विवरण | This project has SQL injection vulnerabilities. After downloading the project to the local machine and deploying it successfully, it was found that almost all files handling database operations have the following issue:
The code extensively uses string concatenation to construct SQL queries, without implementing parameterized queries or input validation. When accessing the student login interface, an attacker can log in directly using a "universal password". Therefore, this project is vulnerable to SQL injection. |
|---|
| स्रोत | ⚠️ https://github.com/DaoYunXinShang/Reports/blob/main/sql%20injection.doc |
|---|
| उपयोगकर्ता | daoyunxinshang (UID 91589) |
|---|
| सबमिशन | 13/10/2025 02:03 PM (12 महीनों पहले) |
|---|
| संयम | 26/10/2025 05:10 PM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 329948 [Abdullah-Hasan-Sajjad Online-School तक f09dda77b4c29aa083ff57f4b1eb991b98b68883 /studentLogin.php Email SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|