| Titolo | E-learning System personal data modification SQl vulnerability |
|---|
| Descrizione | E-learning System personal data modification SQl vulnerability
In the modification of personal data of E-learning System, Sql injection vulnerability exists in phoneNumber parameter, which can be used by attackers to steal malicious information.
Detailed instructions:https://github.com/E1CHO/water_cve/blob/main/E-learning%20System%20personal%20data%20modification%20SQl%20vulnerability.pdf |
|---|
| Fonte | ⚠️ https://github.com/E1CHO/water_cve/blob/main/E-learning%20System%20personal%20data%20modification%20SQl%20vulnerability.pdf |
|---|
| Utente | XiaoZiLong (UID 30695) |
|---|
| Sottomissione | 07/08/2022 04:37 (4 anni fa) |
|---|
| Moderazione | 07/08/2022 10:19 (6 hours later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 205820 [SourceCodester Simple E-Learning System /claire_blake phoneNumber iniezione SQL] |
|---|
| Punti | 20 |
|---|