| Titolo | satya-vinay Events-Management-System 437c77ceb69bf9fe2e3f4f46f7871b83f425383a Exposure of Private Personal Information to an Unauthorized Acto |
|---|
| Descrizione | The affected components are the database dump files `project.sql` and `symbols.sql` (site root), shipped in the public repository. Both files contain the complete `symbols` table dump including the real names and personal email addresses of four registrants, e.g.:
```sql
INSERT INTO `symbols` (`id`, `name`, `email`, `title`, `year`, `gender`, `fromdate`, `todate`, `people`) VALUES
(11, 'Likhit Grandhi', '[email protected]', 'Peace Confrence', 3, 'male', '2017-12-31', '2018-01-02', 4),
(12, 'Sri Ram', '[email protected]', 'Youth Conference', 3, 'male', '2018-04-02', '2017-12-20', 2),
(13, 'Satya Vinay', '[email protected]', 'Hourcode', 3, 'male', '2017-12-12', '2017-12-15', 10),
(14, 'Ajay', '[email protected]', 'National Summit', 2, 'male', '2018-01-11', '2018-03-02', 12);
```
The personal data of third parties is permanently exposed to anyone who clones the repository, enabling spam, phishing, and identity-related abuse against the affected individuals. The same files also describe the full database schema, which eases further attacks against deployments.
|
|---|
| Fonte | ⚠️ https://github.com/satya-vinay/Events-Management-System/issues/6 |
|---|
| Utente | xbjds (UID 101126) |
|---|
| Sottomissione | 04/10/2026 17:48 (22 giorni fa) |
|---|
| Moderazione | 19/10/2026 07:23 (15 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 422249 [satya-vinay Events-Management-System fino a 437c77ceb69bf9fe2e3f4f46f7871b83f425383a project.sql escalationi di privilegi] |
|---|
| Punti | 20 |
|---|