提出 #263656: oretnom Student Attendance System 1.0 sql injection情報

タイトルoretnom Student Attendance System 1.0 sql injection
説明A critical SQL injection vulnerability has been identified in the Student Attendance System, a web-based application designed for educational institutions. This flaw poses a serious risk, allowing unauthorized access, data manipulation, and potential exfiltration of sensitive student information by exploiting the "class_id" parameter.
ソース⚠️ https://drive.google.com/file/d/1Vi-IGjAZbitDqEvmd9ONrxE0MgB8-v1I/view?usp=sharing
ユーザー
 Strik3r (UID 61057)
送信2024年01月08日 02:34 (3 年 ago)
モデレーション2024年01月10日 09:18 (2 days later)
ステータス承諾済み
VulDBエントリ250230 [SourceCodester Student Attendance System 1.0 attendance_report.php class_id SQLインジェクション]
ポイント19

Do you want to use VulDB in your project?

Use the official API to access entries easily!