| Titolo | https://code-projects.org/ College Management System In PHP With Source Code 11 SQL Injection |
|---|
| Descrizione | Root Cause
A SQL injection vulnerability was found in the 'login.php' file of the 'College Management System In PHP With Source Code ' project. The reason for this issue is that attackers inject malicious code from the parameter "user_id和Password" and use it directly in SQL queries without appropriate cleaning or validation. This allows attackers to forge input values, thereby manipulating SQL queries and performing unauthorized operations.
|
|---|
| Fonte | ⚠️ https://github.com/65241/cve/issues/2 |
|---|
| Utente | rootme30 (UID 74919) |
|---|
| Sottomissione | 19/09/2024 21:24 (2 anni fa) |
|---|
| Moderazione | 20/09/2024 10:12 (13 hours later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 274138 [code-projects College Management System 1.0 Login Page login.php email/password iniezione SQL] |
|---|
| Punti | 0 |
|---|