| 제목 | SourceCodester Simple E-learning System 1.0 SQL Injection |
|---|
| 설명 | A SQL injection vulnerability exists in Simple E-learning System version 1.0. The vulnerability occurs in the user profile update component, where the firstName HTTP POST parameter is not properly sanitized. This allows an authenticated attacker to inject arbitrary SQL commands. |
|---|
| 원천 | ⚠️ https://github.com/meifukun/Web-Security-PoCs/blob/main/Simple-E-learning-System/SQLi-UserProfile-firstName.md |
|---|
| 사용자 | 563742137abc (UID 95813) |
|---|
| 제출 | 2026. 03. 08. PM 03:47 (7 개월 ago) |
|---|
| 모더레이션 | 2026. 03. 22. AM 09:48 (14 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 352411 [SourceCodester Simple E-learning System 1.0 User Profile Update firstName SQL 주입] |
|---|
| 포인트들 | 18 |
|---|