| Title | sambitraj STUDENT-MANAGEMENT-SYSTEM 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 SQL Injection |
|---|
| Description | The affected components are the management mutation scripts in the repository root, including add_student.php, add_teacher.php, add_result.php, admin_edit_student.php, admin_edit_teacher.php, admin_edit_result.php, delete_student.php, delete_teacher.php, and delete_result.php. These scripts concatenate raw POST parameters into INSERT, UPDATE, and DELETE SQL statements:
$query = "insert into students values($_POST[roll_no],'$_POST[name]','$_POST[father_name]',$_POST[class],'$_POST[mobile]','$_POST[email]','$_POST[password]','$_POST[remark]')";
$query = "update students set name='$_POST[name]',father_name='$_POST[father_name]',class=$_POST[class],mobile='$_POST[mobile]',email='$_POST[email]',password='$_POST[password]',remark='$_POST[remark]' where roll_no = $_POST[roll_no]";
$query = "delete from students where roll_no = $_POST[roll_no]";
Because the WHERE clauses and inserted values are attacker-controlled, a single crafted request such as roll_no=1 OR 1=1 can expand an intended one-row update into a mass update. The issue enables unauthorized database manipulation, destructive deletion, and privilege-impacting changes to student, teacher, and result records. |
|---|
| Source | ⚠️ https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/5 |
|---|
| User | vkk6 (UID 83180) |
|---|
| Submission | 07/06/2026 19:20 (2 months ago) |
|---|
| Moderation | 08/22/2026 11:04 (2 months later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 394298 [sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 Management Mutation sql injection] |
|---|
| Points | 20 |
|---|