| शीर्षक | CodeAstro Student Attendance Management System v1 SQL Injection |
|---|
| विवरण | A SQL injection vulnerability exists in CodeAstro Student Attendance Management System v1.0 in the /attendance-php/Admin/createSessionTerm.php file. The application does not properly validate, sanitize, or parameterize the sessionName POST parameter before using it in SQL queries.
An attacker can supply crafted input through the sessionName parameter and alter the intended SQL query logic. This may allow unauthorized database access, disclosure of sensitive data, data modification, or service disruption, depending on the privileges assigned to the database user. |
|---|
| स्रोत | ⚠️ https://github.com/freddymuch/Vul/issues/2 |
|---|
| उपयोगकर्ता | freddymuch (UID 98644) |
|---|
| सबमिशन | 01/06/2026 01:59 PM (1 महीना पहले) |
|---|
| संयम | 03/07/2026 06:45 PM (1 month later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 319151 [Student Attendance Management System 1.0 createSessionTerm.php sessionName SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|