| शीर्षक | Lavkush Maurya Student Registration System 1.0 SQL Injection |
|---|
| विवरण | A Time-Based SQL Injection vulnerability exists in Student Registration System v1.0 and earlier within the opwd parameter of student/changepass.php. The application directly incorporates user-supplied input into SQL queries without proper sanitization or parameterized statements. An authenticated attacker can exploit this issue using crafted SQL payloads to execute arbitrary SQL commands, enumerate databases and tables, extract sensitive information, and potentially modify or delete data. Successful exploitation may result in unauthorized access to database contents and compromise of application data integrity and confidentiality.
CWE: CWE-89 (SQL Injection)
Affected Product: Student Registration System
Affected Version: v1.0 and earlier
Affected Component: student/changepass.php (opwd parameter) |
|---|
| स्रोत | ⚠️ https://github.com/sudaisnazir2381-lang/Student-Registration-System/blob/main/sql_injection_time.md |
|---|
| उपयोगकर्ता | Sudais_Nazir (UID 99014) |
|---|
| सबमिशन | 15/06/2026 10:50 AM (2 महीनों पहले) |
|---|
| संयम | 04/08/2026 09:56 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 385931 [lavkush-maurya Student-Registration-System 1.0 /student/changepass.php oldpass SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|