| शीर्षक | Code-Projects Student File Management System V1.0 SQL Injection Vulnerability |
|---|
| विवरण | An SQL injection vulnerability was discovered in the "StudentFileManagementSystem_PHP/SFMS/download.php" file. The reason for this issue is that the attacker can inject malicious code into the parameter "istore_id" when the user logs in. The application failed to properly clean or validate the input during the SQL query, allowing the attacker to control the SQL query and perform unauthorized operations. |
|---|
| स्रोत | ⚠️ https://github.com/Bai-public/CVE/issues/4 |
|---|
| उपयोगकर्ता | Mountain Ghost (UID 92943) |
|---|
| सबमिशन | 26/12/2025 08:15 AM (10 महीनों पहले) |
|---|
| संयम | 28/12/2025 11:23 AM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 338592 [code-projects Student File Management System 1.0 /download.php istore_id SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|