| Title | https://www.sourcecodester.com Online Courseware 1.0 SQL Injection |
|---|
| Description | A critical vulnerability has been discovered in the Online Courseware. This affects the admin/deactivateteach.php file. Operations on the parameter selector[] result in sql injection. Attackers could use it to access, delete or alter sensitive data without authorization: customer information, personal data, trade secrets, intellectual property, etc. |
|---|
| Source | ⚠️ https://github.com/thisissuperann/Vul/blob/Online-Courseware/Online-Courseware-03.md |
|---|
| User | liuann (UID 67227) |
|---|
| Submission | 2024年04月06日 12:01 (8 月 ago) |
|---|
| Moderation | 2024年04月06日 13:02 (1 hour later) |
|---|
| Status | 承諾済み |
|---|
| VulDB Entry | 259590 [SourceCodester Online Courseware 1.0 deactivateteach.php selector sql injection] |
|---|
| Points | 19 |
|---|