제출 #43090: SourceCodester Simple Student Information System manage_department.php SQL Injection

A vulnerability was found in Simple Student Information System admin/departments/manage_department.php released by SourceCodester,
The manipulation of the argument id leads to SQL Injection.
It is possible to initiate the attack remotely.

http://192.168.1.8/sis/admin/departments/manage_department.php?id=-5756%27%20UNION%20ALL%20SELECT%20NULL,database(),user(),NULL,NULL,NULL,NULL--%20-

• 원천: ⚠️ https://bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Simple%20Student%20Information%20System/
• 사용자: bewhale (UID 30640)
• 제출: 2022. 08. 07. PM 09:34 (4 연령 ago)
• 모더레이션: 2022. 08. 07. PM 09:49 (15 minutes later)
• 상태: 수락
• VulDB 항목: 205829 [SourceCodester Simple Student Information System manage_department.php id SQL 주입]
• 포인트들: 20