| Titolo | SourceCodester Student Study Center Desk Management System 1.0 SQLi |
|---|
| Descrizione | Related Code file:
/Master.php?f=save_student
Injection parameter:
MULTIPART id
POST parameter 'MULTIPART id' is vulnerable to error-based SQLi.
sqlmap finding:
```
Parameter: MULTIPART id ((custom) POST)
Type: error-based
Title: MySQL OR error-based - WHERE or HAVING clause (FLOOR)
Payload: -----------------------------250939851917583644163997292923
Content-Disposition: form-data; name="id"
```
Report link: https://reports-kunull.vercel.app/CVE%20research/student-study-center-desk-management-system-save_student |
|---|
| Fonte | ⚠️ https://www.sourcecodester.com/php/16298/student-study-center-desk-management-system-using-php-oop-and-mysql-db-free-source-code |
|---|
| Utente | Anonymous User |
|---|
| Sottomissione | 13/07/2024 16:23 (2 anni fa) |
|---|
| Moderazione | 13/07/2024 19:22 (3 hours later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 271449 [SourceCodester Student Study Center Desk Management System 1.0 Master.php?f=save_student ID iniezione SQL] |
|---|
| Punti | 20 |
|---|