| 标题 | Fabian Ros Student File Management System in PHP 1.0 SQL Injection |
|---|
| 描述 | A SQL injection vulnerability exists in the Student File Management System (SFMS) v1.0 within the /admin/delete_student.php file, where the stud_id POST parameter is directly concatenated into a SELECT SQL query without proper validation or parameterization, allowing authenticated attackers to inject malicious SQL statements and potentially extract sensitive student data, manipulate database records, or perform unauthorized database operations through crafted HTTP requests targeting the vulnerable deletion functionality. |
|---|
| 来源 | ⚠️ https://gist.github.com/b1uel0n3/35e2102f4ce88f3ef45472f86c4e34dd |
|---|
| 用户 | b1uel0n3 (UID 93016) |
|---|
| 提交 | 2025-12-08 15時03分 (10 月前) |
|---|
| 管理 | 2025-12-13 10時01分 (5 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 336379 [code-projects Student File Management System 1.0 delete_student.php stud_id SQL注入] |
|---|
| 积分 | 0 |
|---|