| Título | satya-vinay Events-Management-System 437c77ceb69bf9fe2e3f4f46f7871b83f425383a SQL Injection |
|---|
| Descrição | The affected component is `dodelete.php` (site root), the unauthenticated registration-delete handler. The record id is taken raw from `$_REQUEST` and concatenated directly into a `DELETE` statement with no escaping and no authentication:
```php
include("dbconnect.php");
$id=$_REQUEST["id"];
$query=mysqli_query($db_connect, "delete from symbols where id = '$id' ");
```
A payload such as `1' OR '1'='1` makes the WHERE clause always true, deleting every row in the `symbols` table in a single unauthenticated request. Verified in the test environment: the injection removed all 6 stored registration records. Because the page reads `$_REQUEST`, the destructive query can also be triggered with a plain GET link.
|
|---|
| Fonte | ⚠️ https://github.com/satya-vinay/Events-Management-System/issues/3 |
|---|
| Utilizador | xbjds (UID 101126) |
|---|
| Submissão | 04/10/2026 17h47 (há 22 dias) |
|---|
| Moderação | 19/10/2026 07h23 (15 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 422247 [satya-vinay Events-Management-System até 437c77ceb69bf9fe2e3f4f46f7871b83f425383a Registration-Delete dodelete.php id Injeção SQL] |
|---|
| Pontos | 20 |
|---|