| 제목 | Assessment Management System lecturer/marking-scheme.php SQL Injection Vulnerability v1.0 SQL Injection |
|---|
| 설명 | # Assessment Management System lecturer/marking-scheme.php SQL Injection Vulnerability
A SQL injection vulnerability exists in the `lecturer/marking-scheme.php` file of the Assessment Management System.
The application directly concatenates user-controlled input from the `smarksrange[]` parameter into an SQL `INSERT`
statement without proper sanitization or parameterized statements. As a result, an attacker can inject arbitrary SQL
syntax into the backend database query.
##
## Impact of the Vulnerability
This vulnerability may allow an attacker to manipulate backend SQL queries, trigger database error-based responses,
and potentially extract sensitive database information. Because the application returns raw database errors via
`mysqli_error($conn)`, successful exploitation can disclose attacker-controlled query output directly in the HTTP
response.
##
## Payload
```
'and/**/extractvalue(1,concat(char(126),md5(1818918310)))and'
```
'and/**/extractvalue(1,concat(char(126),md5(1818918310)))and'
## Source Download
```
[Assessment Management In PHP With Source Code - Source Code & Projects](https://code-projects.org/assessment-management-in-php-with-source-code/)
```
|
|---|
| 원천 | ⚠️ https://github.com/zzzxc643/CVE1/blob/main/assessment/vul6.md |
|---|
| 사용자 | SSL_Seven_Security_Lab_WangZhiQiang_ZhanXiuChen (UID 97200) |
|---|
| 제출 | 2026. 06. 03. AM 07:09 (1 월 ago) |
|---|
| 모더레이션 | 2026. 07. 03. PM 08:50 (1 month later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 376171 [code-projects Assessment Management 1.0 marking-scheme.php smarksrange[] SQL 주입] |
|---|
| 포인트들 | 20 |
|---|