| tiêu đề | sambitraj STUDENT-MANAGEMENT-SYSTEM 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 SQL Injection |
|---|
| Mô tả | The affected components are the management mutation scripts in the repository root, including add_student.php, add_teacher.php, add_result.php, admin_edit_student.php, admin_edit_teacher.php, admin_edit_result.php, delete_student.php, delete_teacher.php, and delete_result.php. These scripts concatenate raw POST parameters into INSERT, UPDATE, and DELETE SQL statements:
$query = "insert into students values($_POST[roll_no],'$_POST[name]','$_POST[father_name]',$_POST[class],'$_POST[mobile]','$_POST[email]','$_POST[password]','$_POST[remark]')";
$query = "update students set name='$_POST[name]',father_name='$_POST[father_name]',class=$_POST[class],mobile='$_POST[mobile]',email='$_POST[email]',password='$_POST[password]',remark='$_POST[remark]' where roll_no = $_POST[roll_no]";
$query = "delete from students where roll_no = $_POST[roll_no]";
Because the WHERE clauses and inserted values are attacker-controlled, a single crafted request such as roll_no=1 OR 1=1 can expand an intended one-row update into a mass update. The issue enables unauthorized database manipulation, destructive deletion, and privilege-impacting changes to student, teacher, and result records. |
|---|
| Nguồn | ⚠️ https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/5 |
|---|
| Người dùng | vkk6 (UID 83180) |
|---|
| Đệ trình | 06/07/2026 19:20 (cách đây 2 các tháng) |
|---|
| Kiểm duyệt | 22/08/2026 11:04 (2 months later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 394298 [sambitraj Student-Management-System đến 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 Management Mutation Tiêm SQL] |
|---|
| điểm | 20 |
|---|