| 제목 | https://itsourcecode.com Society-Management-System 1.0 SQL Injection |
|---|
| 설명 | https://github.com/anglemsg2401-bot/cve/issues/5
The code in the check_student. php file directly concatenates the student ID parameter submitted by the user through POST into the SQL statement without any filtering or escaping processing, which allows the user to input malicious SQL statements and creates SQL injection risks.
NAME OF AFFECTED PRODUCT(S)
Society-Management-System
Vendor Homepage
https://itsourcecode.com/wp-content/uploads/2021/04/Society-Management-System-Project-In-PHP-Free-Download-Source-Code.zip
AFFECTED AND/OR FIXED VERSION(S)
submitter
1
Vulnerable File
/society/check_student.php
VERSION(S)
V1.0
Software Link
https://itsourcecode.com/wp-content/uploads/2021/04/Society-Management-System-Project-In-PHP-Free-Download-Source-Code.zip
PROBLEM TYPE
Vulnerability Type
SQL injection |
|---|
| 원천 | ⚠️ https://github.com/anglemsg2401-bot/cve/issues/5 |
|---|
| 사용자 | anglemsg (UID 99064) |
|---|
| 제출 | 2026. 07. 23. PM 10:27 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 09. 06. PM 02:30 (1 month later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 399426 [itsourcecode Information System Society Membership System 1.0 check_student.php student_id SQL 주입] |
|---|
| 포인트들 | 20 |
|---|