| 标题 | Sql injection exists for Student Management System page ID |
|---|
| 描述 | Sql injection vulnerability exists in the page ID code parameter of Student Management System, which can be exploited by attackers to obtain sensitive information and cause data leakage.
The dangers of SQL injection
Database information leakage: The leakage of user's private information stored in the database.
Web page tampering: tampering with specific web pages by manipulating the database.
The website is hacked, and malware spreads: modify the values of some fields in the database, embed the link of the network, and carry out the hacking attack.
The database was operated maliciously: the database server was attacked, and the system administrator account of the database was tampered with.
The server was remotely controlled and backdoored. Operating system support provided by the database server allows hackers to modify or control the operating system.
Destroy hard disk data and paralyze the entire system. |
|---|
| 来源 | ⚠️ https://github.com/beicheng-maker/vulns/issues/4 |
|---|
| 用户 | cppuzhang (UID 31043) |
|---|
| 提交 | 2022-08-17 16時19分 (4 年前) |
|---|
| 管理 | 2022-08-17 20時37分 (4 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 206634 [SourceCodester Student Management System index.php id SQL注入] |
|---|
| 积分 | 20 |
|---|