| Título | oretnom Student Attendance System 1.0 sql injection |
|---|
| Descrição | A critical SQL injection vulnerability has been identified in the Student Attendance System, a web-based application designed for educational institutions. This flaw poses a serious risk, allowing unauthorized access, data manipulation, and potential exfiltration of sensitive student information by exploiting the "class_id" parameter. |
|---|
| Fonte | ⚠️ https://drive.google.com/file/d/1Vi-IGjAZbitDqEvmd9ONrxE0MgB8-v1I/view?usp=sharing |
|---|
| Utilizador | Strik3r (UID 61057) |
|---|
| Submissão | 08/01/2024 02h34 (há 2 anos) |
|---|
| Moderação | 10/01/2024 09h18 (2 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 250230 [SourceCodester Student Attendance System 1.0 attendance_report.php class_id Injeção SQL] |
|---|
| Pontos | 19 |
|---|