| 제목 | SourceCodester Online Examination System Project V1.0 SQL Injection |
|---|
| 설명 | zebra11 discovered a significant security vulnerability in the Online Examination System Project, caused by inadequate protection of the "email" parameter in the "registeracc.php" file. This vulnerability could be exploited to inject malicious SQL queries, leading to unauthorized access and the extraction of sensitive information from the database.
The method on line 22 of the "registeracc.php" file retrieves the value of the user input "email" from the POST element. Then the value of this element will be passed to the code without proper purification or validation, and ultimately used for database queries in the method on line 27 of the "registeracc.php" file. This may lead to SQL injection attacks. |
|---|
| 원천 | ⚠️ https://github.com/CveSecLook/cve/issues/32 |
|---|
| 사용자 | zebra11 (UID 68838) |
|---|
| 제출 | 2024. 05. 15. PM 06:51 (2 연령 ago) |
|---|
| 모더레이션 | 2024. 05. 17. AM 07:51 (2 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 264743 [SourceCodester Online Examination System 1.0 registeracc.php email SQL 주입] |
|---|
| 포인트들 | 20 |
|---|