| 标题 | oretnom Student Attendance System 1.0 sql injection |
|---|
| 描述 | A critical SQL injection vulnerability has been identified in the Student Attendance System, a web-based application designed for educational institutions. This flaw poses a serious risk, allowing unauthorized access, data manipulation, and potential exfiltration of sensitive student information by exploiting the "class_id" parameter. |
|---|
| 来源 | ⚠️ https://drive.google.com/file/d/1Vi-IGjAZbitDqEvmd9ONrxE0MgB8-v1I/view?usp=sharing |
|---|
| 用户 | Strik3r (UID 61057) |
|---|
| 提交 | 2024-01-08 02時34分 (3 年前) |
|---|
| 管理 | 2024-01-10 09時18分 (2 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 250230 [SourceCodester Student Attendance System 1.0 attendance_report.php class_id SQL注入] |
|---|
| 积分 | 19 |
|---|