| Title | E-learning System personal data modification SQl vulnerability |
|---|
| Description | E-learning System personal data modification SQl vulnerability
In the modification of personal data of E-learning System, Sql injection vulnerability exists in phoneNumber parameter, which can be used by attackers to steal malicious information.
Detailed instructions:https://github.com/E1CHO/water_cve/blob/main/E-learning%20System%20personal%20data%20modification%20SQl%20vulnerability.pdf |
|---|
| Source | ⚠️ https://github.com/E1CHO/water_cve/blob/main/E-learning%20System%20personal%20data%20modification%20SQl%20vulnerability.pdf |
|---|
| User | XiaoZiLong (UID 30695) |
|---|
| Submission | 08/07/2022 04:37 (4 years ago) |
|---|
| Moderation | 08/07/2022 10:19 (6 hours later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 205820 [SourceCodester Simple E-Learning System /claire_blake phoneNumber sql injection] |
|---|
| Points | 20 |
|---|