| タイトル | Attendance Tracking Management System (PHP & MySQL) 1.0 SQL Injection |
|---|
| 説明 | Initial Observation
Researchers noticed abnormal query responses when modifying the parameter attendance_id (in practice, labeled as course_id in the actual request) in /admin/report.php.
Root Cause
Input from course_id is used directly in SQL queries without proper cleansing or validation.
Attackers can embed malicious SQL statements by manipulating the parameter, thereby gaining unauthorized access to or control of the database.
If successfully exploited, this SQL injection can result in:
Unauthorized Database Access: Attackers read or retrieve sensitive information.
Data Leakage: Confidential records such as attendance logs or user info may be exposed.
Data Manipulation: Potential to create, update, or delete rows maliciously.
System Disruption: Use of time-based (SLEEP) queries could degrade performance or crash services.
Wider Network Risks: Lateral movement if privileged credentials are compromised. |
|---|
| ソース | ⚠️ https://github.com/matias-a11y/cve/issues/2 |
|---|
| ユーザー | mxh9934 (UID 73328) |
|---|
| 送信 | 2024年12月29日 15:25 (2 年 ago) |
|---|
| モデレーション | 2024年12月29日 16:45 (1 hour later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 289770 [1000 Projects Attendance Tracking Management System 1.0 /admin/report.php attendance_report course_id SQLインジェクション] |
|---|
| ポイント | 20 |
|---|