| タイトル | https://itsourcecode.com School-Management-System 1.0 SQL Injection |
|---|
| 説明 | https://github.com/anglemsg2401-bot/cve/issues/6
The code in the User_Login.php file directly concatenates the email parameters submitted by the user through POST into the SQL statement without any filtering or escaping processing, which allows the user to input malicious SQL statements and creates SQL injection risks.
NAME OF AFFECTED PRODUCT(S)
School-Management-System
Vendor Homepage
https://itsourcecode.com/wp-content/uploads/2022/01/School-Management-System-Project-In-PHP-Source-Code.zip
AFFECTED AND/OR FIXED VERSION(S)
submitter
1
Vulnerable File
/school/model/user_login.php
VERSION(S)
V1.0
Software Link
https://itsourcecode.com/wp-content/uploads/2022/01/School-Management-System-Project-In-PHP-Source-Code.zip
PROBLEM TYPE
Vulnerability Type
SQL injection |
|---|
| ソース | ⚠️ https://github.com/anglemsg2401-bot/cve/issues/6 |
|---|
| ユーザー | anglemsg (UID 99064) |
|---|
| 送信 | 2026年07月23日 22:32 (2 月 ago) |
|---|
| モデレーション | 2026年09月06日 14:30 (1 month later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 399427 [itsourcecode School Management System 1.0 User_Login.php email SQLインジェクション] |
|---|
| ポイント | 20 |
|---|