| Title | vraj404 Criminal-Management-System 2808d057e7ddc5295519a487365b0cacfd0ba8c4 SQL Injection |
|---|
| Description | The affected component is `home.php` (site root), the unauthenticated "Criminal Information" submission form. Every field of the form is concatenated directly into an `INSERT` statement without escaping or prepared statements, and the page enforces no authentication:
```php
$q1="INSERT INTO `info`(`id`, `name`, `offname`, `crime`, `dob`, `arrDate`, `crimeDate`, `sex`, `address`,`img`,`more`) VALUES ('$id','$name','$offName','$crime','$dob','$arrDate','$crimeDate','$sex','$address','$folder','$more')";
```
Because the query runs on every page load, the flaw is reachable without any prior setup. An attacker can break out of the quoted value, close the `VALUES` list, and inject arbitrary SQL (verified: time-based blind injection with `SLEEP(3)` and subquery-based extraction of `users.pass` from the database into a stored column).
|
|---|
| Source | ⚠️ https://github.com/vraj404/Criminal-Management-System/issues/3 |
|---|
| User | SoyaBean (UID 101904) |
|---|
| Submission | 10/05/2026 17:24 (22 days ago) |
|---|
| Moderation | 10/19/2026 07:50 (14 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 422258 [vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4 Submission Form home.php sql injection] |
|---|
| Points | 20 |
|---|