| Название | SourceCodester Simple E-learning System 1.0 SQL Injection |
|---|
| Описание | A SQL injection vulnerability exists in Simple E-learning System version 1.0. The vulnerability occurs in the user profile update component, where the firstName HTTP POST parameter is not properly sanitized. This allows an authenticated attacker to inject arbitrary SQL commands. |
|---|
| Источник | ⚠️ https://github.com/meifukun/Web-Security-PoCs/blob/main/Simple-E-learning-System/SQLi-UserProfile-firstName.md |
|---|
| Пользователь | 563742137abc (UID 95813) |
|---|
| Представление | 08.03.2026 15:47 (7 месяцы назад) |
|---|
| Модерация | 22.03.2026 09:48 (14 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 352411 [SourceCodester Simple E-learning System 1.0 User Profile Update firstName SQL-инъекция] |
|---|
| Баллы | 18 |
|---|