| 标题 | PHPGurukul Students Record Management Project in PHP V 3.20 SQL Injection |
|---|
| 描述 | A critical SQL injection vulnerability has been identified in version 3.20 of the Students Record Management Project in PHP.
This vulnerability resides in the login functionality of the login.php file.
Due to insufficient input validation and lack of proper sanitization, an attacker can exploit the id parameter to inject malicious SQL commands.
Successful exploitation may allow an attacker to bypass authentication or extract sensitive information from the database.
This vulnerability poses a significant security risk as it can be exploited without prior authentication.
Immediate remediation is strongly recommended to protect the system from potential attacks. |
|---|
| 来源 | ⚠️ https://github.com/y7syeu/CVE/issues/1 |
|---|
| 用户 | Huoma (UID 85596) |
|---|
| 提交 | 2025-05-22 10時55分 (1 年前) |
|---|
| 管理 | 2025-05-26 15時35分 (4 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 310312 [PHPGurukul Student Record System 3.20 /login.php 标识符 SQL注入] |
|---|
| 积分 | 20 |
|---|