提出 #709095: Code-projects Student File Management System v1.0 Authentication Bypass by Primary Weakness情報

タイトルCode-projects Student File Management System v1.0 Authentication Bypass by Primary Weakness
説明An "Authentication Bypass (Student Login)" vulnerability was discovered in testing the Student File Management System project. The root cause is that attackers can bypass account password verification by constructing Payloads such as 'or 1=1---, log in directly to the system background, obtain student permissions, view/tamper with student file data, and endanger system security and user privacy. Immediate corrective actions are essential to safeguard system security and uphold data integrity.
ソース⚠️ https://github.com/jjjjj-zr/jjjjjzr10/issues/2
ユーザー
 jjjjjzr (UID 92774)
送信2025年12月08日 10:52 (10 月 ago)
モデレーション2025年12月13日 10:00 (5 days later)
ステータス重複
VulDBエントリ336304 [code-projects Student File Management System 1.0 login_query.php stud_no SQLインジェクション]
ポイント0

Want to know what is going to be exploited?

We predict KEV entries!