| शीर्षक | code-projects Student Membership System 1.0 SQL Injection |
|---|
| विवरण | In the user registration feature, user-submitted $_POST data is directly concatenated into SQL queries without any filtering or parameterization. An attacker could execute arbitrary SQL commands by crafting malicious input, potentially leading to data leaks, data tampering, or complete control over the database.
Impact: An attacker can execute arbitrary SQL commands, including deleting tables, reading sensitive data, modifying data, and gaining a database shell, thereby gaining complete control over the database. |
|---|
| स्रोत | ⚠️ https://github.com/maidangdang1/CVE/issues/1 |
|---|
| उपयोगकर्ता | nomath (UID 96446) |
|---|
| सबमिशन | 15/03/2026 10:25 AM (7 महीनों पहले) |
|---|
| संयम | 31/03/2026 12:24 AM (16 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 354293 [code-projects Student Membership System 1.0 User Registration SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|