| Title | oretnom23 Simple Student Attendance System ajax-api.php 1.0 SQL injection |
|---|
| Description | 标题:Simple_Student_Attendance_System ajax-api.php class_date参数 存在SQL 注入
概述:Simple_Student_Attendance_System 中发现了一个被归类为严重的漏洞。这会影响文件ajax-api.php的未知部分。对参数class_date的操作导致 sql 注入
咨询:https://github.com/daydust/vuln/blob/main/Simple_Student_Attendance_System/ajax-api.php_SQL-injection.md |
|---|
| User | Eva1 (UID 59850) |
|---|
| Submission | 12/08/2023 16:10 (3 years ago) |
|---|
| Moderation | 12/10/2023 08:12 (2 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 247366 [SourceCodester Simple Student Attendance System 1.0 ajax-api.php?action=save_attendance class_id sql injection] |
|---|
| Points | 17 |
|---|