| 标题 | code-projects Student Information System 2.0 SQL Injection |
|---|
| 描述 | In the index.php file of Student Information System, theuser username parameter is obtained, and the SQL statement is concatenated to the SQL statement without filtering the execution, resulting in SQL injection vulnerabilities and server permissions |
|---|
| 来源 | ⚠️ https://github.com/asd1238525/cve/blob/main/SQL15.md |
|---|
| 用户 | yunlin (UID 79129) |
|---|
| 提交 | 2025-11-02 10時31分 (11 月前) |
|---|
| 管理 | 2025-11-15 07時57分 (13 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 332569 [code-projects Student Information System 2.0 /editprofile.php SQL注入] |
|---|
| 积分 | 17 |
|---|