| 标题 | https://code-projects.org/ College Management System In PHP With Source Code 11 SQL Injection |
|---|
| 描述 | Root Cause
A SQL injection vulnerability was found in the 'login.php' file of the 'College Management System In PHP With Source Code ' project. The reason for this issue is that attackers inject malicious code from the parameter "user_id和Password" and use it directly in SQL queries without appropriate cleaning or validation. This allows attackers to forge input values, thereby manipulating SQL queries and performing unauthorized operations.
|
|---|
| 来源 | ⚠️ https://github.com/65241/cve/issues/2 |
|---|
| 用户 | rootme30 (UID 74919) |
|---|
| 提交 | 2024-09-19 21時24分 (2 年前) |
|---|
| 管理 | 2024-09-20 10時12分 (13 hours later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 274138 [code-projects College Management System 1.0 Login Page login.php email/password SQL注入] |
|---|
| 积分 | 0 |
|---|