| 제목 | code-projects student-information-system 1.0 SQL Injection |
|---|
| 설명 | The username and password parameter in /index.php is not properly sanitized or parameterized, which leaves it vulnerable to SQL injection attacks. Attackers can exploit this by injecting malicious SQL code to manipulate the database queries. Utilizing time-based SQL injection methods, they can introduce intentional delays in the database response through functions such as SLEEP(). This technique can be employed to verify the existence of the vulnerability and may also be used to extract sensitive information from the database. |
|---|
| 원천 | ⚠️ https://github.com/LamentXU123/cve/blob/main/sql_injection4.md |
|---|
| 사용자 | LamentXU (UID 78142) |
|---|
| 제출 | 2025. 11. 04. PM 02:09 (11 개월 ago) |
|---|
| 모더레이션 | 2025. 11. 16. AM 11:52 (12 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 332567 [code-projects Student Information System 2.0 /index.php 사용자 이름 SQL 주입] |
|---|
| 포인트들 | 0 |
|---|