| タイトル | 37954679 cak-filemanagement-system 5e6433246475e66462e1fea980688de96a049297 SQL Injection |
|---|
| 説明 | The affected component is `admin/save_student.php`. All POST parameters (`date`, `department`, `subject`, `forwarded_to`, `action_taken_by`, `section`) are directly concatenated into an INSERT SQL statement without sanitization or parameterized queries. The endpoint lacks any session or authentication check:
```php
$date = $_POST['date'];
$department = $_POST['department'];
$subject = $_POST['subject'];
$fowarded_to = $_POST['forwarded_to'];
$action_taken_by = $_POST['action_taken_by']."".$_POST['section'];
$password = md5($_POST['password']);
mysqli_query($conn, "INSERT INTO `logs` VALUES('', '$date', '$department', '$subject', '$fowarded_to', '$action_taken_by', '$password')") or die(mysqli_error());
```
An unauthenticated attacker can inject arbitrary SQL through any of the five unprotected parameters to extract database contents, modify records, or disrupt the application. |
|---|
| ソース | ⚠️ https://github.com/37954679/cak-filemanagement-system/issues/1 |
|---|
| ユーザー | namlau0721 (UID 102075) |
|---|
| 送信 | 2026年10月12日 21:39 (25 日 ago) |
|---|
| モデレーション | 2026年10月30日 13:37 (18 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 429058 [37954679 cak-filemanagement-system 迄 5e6433246475e66462e1fea980688de96a049297 admin/save_student.php mysqli_query SQLインジェクション] |
|---|
| ポイント | 20 |
|---|