Submit #100705: College Management System has Sql injection Vulnerability

SQl injection vulnerability exists in password parameter of login.php of
computer parts sales and inventory system. This is a security
A vulnerability in the database layer of a Web program
The simplest flaw in a website. Main reason
The program does not judge and process the validity of user input
Data so that an attacker can send
Predefined SQL statements in Web applications and made illegal
Spoofing by performing operations without the knowledge of the
administrator
The database server performs arbitrary unauthorized queries. Therefore
Obtain further data information. In short, SQL injection is
Insert an SQL statement into the user input string. If not selected
With poorly designed programs, these injected SQL statements may be
incorrect
Database server for normal SQL statements and runs, allowing one
Attackers execute unplanned commands or access unauthorized data.

Source Download：https://download.code-projects.org/details/1c3b87e5-f6a6-46dd-9b5f-19c39667866f

• Source: ⚠️ https://github.com/Songs-YZS/CveList/blob/main/college-management-system-has-Sql-injection-vulnerability.pdf
• User: YaoSeng (UID 42728)
• Submission: 03/12/2023 14:19 (4 years ago)
• Moderation: 03/13/2023 06:34 (16 hours later)
• Status: Duplicate
• VulDB entry: 213872 [College Management System 1.0 Login Page login.php username/password sql injection]
• Points: 0