| Название | Yash Pokharna StudentManagementSystem 1.0 SQL Injection |
|---|
| Описание | Describe the bug
Two critical issues exist in student_trans.php:
Broken Access Control: The script does not include session.php or call confirm_logged_in(), leaving the endpoint completely unauthenticated. Anyone can access it without a valid session cookie.
SQL Injection: User-supplied POST parameters (FIRST_NAME, Last_Name, EMAIL, etc.) are directly concatenated into an INSERT SQL statement without sanitization or parameterized queries.
An attacker can exploit this to insert arbitrary data (including malicious XSS payloads) into the database, or perform time‑based/error‑based SQL injection. |
|---|
| Источник | ⚠️ https://github.com/yashpokharna2555/StudentManagementSystem/issues/3 |
|---|
| Пользователь | Levis1 (UID 96766) |
|---|
| Представление | 27.04.2026 10:44 (1 месяц назад) |
|---|
| Модерация | 24.05.2026 11:06 (27 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 365451 [yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203 student_trans.php confirm_logged_in FIRST_NAME/Last_Name/EMAIL SQL-инъекция] |
|---|
| Баллы | 20 |
|---|