| 标题 | Code-projects Student File Management System v1.0 Authentication Bypass by Primary Weakness |
|---|
| 描述 | An "Authentication Bypass (Student Login)" vulnerability was discovered in testing the Student File Management System project. The root cause is that attackers can bypass account password verification by constructing Payloads such as 'or 1=1---, log in directly to the system background, obtain student permissions, view/tamper with student file data, and endanger system security and user privacy. Immediate corrective actions are essential to safeguard system security and uphold data integrity. |
|---|
| 来源 | ⚠️ https://github.com/jjjjj-zr/jjjjjzr10/issues/2 |
|---|
| 用户 | jjjjjzr (UID 92774) |
|---|
| 提交 | 2025-12-08 10時52分 (10 月前) |
|---|
| 管理 | 2025-12-13 10時00分 (5 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 336304 [code-projects Student File Management System 1.0 login_query.php stud_no SQL注入] |
|---|
| 积分 | 0 |
|---|