| शीर्षक | https://github.com/mathurvishal/CloudClassroom-PHP-Project CloudClassroom PHP Project 5dadec098bfbbf3300d60c3494db3fb95b66e7be SQL Injection |
|---|
| विवरण | A flaw has been found in Student Management System in the student update functionality (updatestudent.php). The vulnerability is caused by improper neutralization of user-supplied input in SQL queries when processing the eno parameter directly via dynamic string concatenation without using parameterized statements. A remote attacker can exploit this issue by manipulating the input parameter to alter query logic, bypass intended restrictions, and gain unauthorized access to database records. Additionally, cleartext password handling further exposes sensitive user credentials. |
|---|
| स्रोत | ⚠️ https://github.com/hofuman/CVE/blob/main/README.md |
|---|
| उपयोगकर्ता | Anonymous User |
|---|
| सबमिशन | 04/08/2026 03:08 AM (2 महीनों पहले) |
|---|
| संयम | 25/09/2026 11:06 AM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 409903 [mathurvishal CloudClassroom-PHP-Project तक 5dadec098bfbbf3300d60c3494db3fb95b66e7be Student Update Functionality updatestudent.php eno SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|