| Title | satya-vinay Events-Management-System 437c77ceb69bf9fe2e3f4f46f7871b83f425383a Exposure of Private Personal Information to an Unauthorized Acto |
|---|
| Description | The affected components are the database dump files `project.sql` and `symbols.sql` (site root), shipped in the public repository. Both files contain the complete `symbols` table dump including the real names and personal email addresses of four registrants, e.g.:
```sql
INSERT INTO `symbols` (`id`, `name`, `email`, `title`, `year`, `gender`, `fromdate`, `todate`, `people`) VALUES
(11, 'Likhit Grandhi', '[email protected]', 'Peace Confrence', 3, 'male', '2017-12-31', '2018-01-02', 4),
(12, 'Sri Ram', '[email protected]', 'Youth Conference', 3, 'male', '2018-04-02', '2017-12-20', 2),
(13, 'Satya Vinay', '[email protected]', 'Hourcode', 3, 'male', '2017-12-12', '2017-12-15', 10),
(14, 'Ajay', '[email protected]', 'National Summit', 2, 'male', '2018-01-11', '2018-03-02', 12);
```
The personal data of third parties is permanently exposed to anyone who clones the repository, enabling spam, phishing, and identity-related abuse against the affected individuals. The same files also describe the full database schema, which eases further attacks against deployments.
|
|---|
| Source | ⚠️ https://github.com/satya-vinay/Events-Management-System/issues/6 |
|---|
| User | xbjds (UID 101126) |
|---|
| Submission | 10/04/2026 17:48 (22 days ago) |
|---|
| Moderation | 10/19/2026 07:23 (15 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 422249 [satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a project.sql file access] |
|---|
| Points | 20 |
|---|