| शीर्षक | Soarkey StudentManagement e08f7f1d5015af407aa4cca0ada3dea189b4937e SQL Injection |
|---|
| विवरण | The affected request path is the `course_ranking` action in `code/src/service/AdminDao.java` at lines 499-525, which forwards the untrusted `cno` parameter into `code/src/dao/CourseDao.java`. `CourseDao.course_ranking(String cno)` at lines 151-156 builds the SQL statement by concatenating `cno` directly into `... and cno = '"+cno+"' order by grade desc;` before execution. Because no parameter binding or validation is applied, an attacker can inject arbitrary SQL conditions and UNION clauses through `cno`. This allows retrieval of unintended rows and exfiltration of data from other tables such as `user`, including usernames, plaintext passwords, and privilege levels. |
|---|
| स्रोत | ⚠️ https://github.com/Soarkey/StudentManagement/issues/33 |
|---|
| उपयोगकर्ता | soulinda (UID 99812) |
|---|
| सबमिशन | 16/07/2026 06:37 PM (1 महीना पहले) |
|---|
| संयम | 30/08/2026 10:00 AM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 397120 [Soarkey StudentManagement/学生信息管理系统 तक e08f7f1d5015af407aa4cca0ada3dea189b4937e CourseDao.java CourseDao.course_ranking cno SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|