| 제목 | sambitraj STUDENT-MANAGEMENT-SYSTEM 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 SQL Injection |
|---|
| 설명 | The affected components are the management mutation scripts in the repository root, including add_student.php, add_teacher.php, add_result.php, admin_edit_student.php, admin_edit_teacher.php, admin_edit_result.php, delete_student.php, delete_teacher.php, and delete_result.php. These scripts concatenate raw POST parameters into INSERT, UPDATE, and DELETE SQL statements:
$query = "insert into students values($_POST[roll_no],'$_POST[name]','$_POST[father_name]',$_POST[class],'$_POST[mobile]','$_POST[email]','$_POST[password]','$_POST[remark]')";
$query = "update students set name='$_POST[name]',father_name='$_POST[father_name]',class=$_POST[class],mobile='$_POST[mobile]',email='$_POST[email]',password='$_POST[password]',remark='$_POST[remark]' where roll_no = $_POST[roll_no]";
$query = "delete from students where roll_no = $_POST[roll_no]";
Because the WHERE clauses and inserted values are attacker-controlled, a single crafted request such as roll_no=1 OR 1=1 can expand an intended one-row update into a mass update. The issue enables unauthorized database manipulation, destructive deletion, and privilege-impacting changes to student, teacher, and result records. |
|---|
| 원천 | ⚠️ https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/5 |
|---|
| 사용자 | vkk6 (UID 83180) |
|---|
| 제출 | 2026. 07. 06. PM 07:20 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 08. 22. AM 11:04 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 394298 [sambitraj Student-Management-System 까지 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 Management Mutation SQL 주입] |
|---|
| 포인트들 | 20 |
|---|