| Titolo | satya-vinay Events-Management-System 437c77ceb69bf9fe2e3f4f46f7871b83f425383a SQL Injection |
|---|
| Descrizione | The affected component is `dodelete.php` (site root), the unauthenticated registration-delete handler. The record id is taken raw from `$_REQUEST` and concatenated directly into a `DELETE` statement with no escaping and no authentication:
```php
include("dbconnect.php");
$id=$_REQUEST["id"];
$query=mysqli_query($db_connect, "delete from symbols where id = '$id' ");
```
A payload such as `1' OR '1'='1` makes the WHERE clause always true, deleting every row in the `symbols` table in a single unauthenticated request. Verified in the test environment: the injection removed all 6 stored registration records. Because the page reads `$_REQUEST`, the destructive query can also be triggered with a plain GET link.
|
|---|
| Fonte | ⚠️ https://github.com/satya-vinay/Events-Management-System/issues/3 |
|---|
| Utente | xbjds (UID 101126) |
|---|
| Sottomissione | 04/10/2026 17:47 (21 giorni fa) |
|---|
| Moderazione | 19/10/2026 07:23 (15 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 422247 [satya-vinay Events-Management-System fino a 437c77ceb69bf9fe2e3f4f46f7871b83f425383a Registration-Delete dodelete.php id iniezione SQL] |
|---|
| Punti | 20 |
|---|