| 标题 | sambitraj STUDENT-MANAGEMENT-SYSTEM 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 SQL Injection |
|---|
| 描述 | The affected components are the management mutation scripts in the repository root, including add_student.php, add_teacher.php, add_result.php, admin_edit_student.php, admin_edit_teacher.php, admin_edit_result.php, delete_student.php, delete_teacher.php, and delete_result.php. These scripts concatenate raw POST parameters into INSERT, UPDATE, and DELETE SQL statements:
$query = "insert into students values($_POST[roll_no],'$_POST[name]','$_POST[father_name]',$_POST[class],'$_POST[mobile]','$_POST[email]','$_POST[password]','$_POST[remark]')";
$query = "update students set name='$_POST[name]',father_name='$_POST[father_name]',class=$_POST[class],mobile='$_POST[mobile]',email='$_POST[email]',password='$_POST[password]',remark='$_POST[remark]' where roll_no = $_POST[roll_no]";
$query = "delete from students where roll_no = $_POST[roll_no]";
Because the WHERE clauses and inserted values are attacker-controlled, a single crafted request such as roll_no=1 OR 1=1 can expand an intended one-row update into a mass update. The issue enables unauthorized database manipulation, destructive deletion, and privilege-impacting changes to student, teacher, and result records. |
|---|
| 来源 | ⚠️ https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/5 |
|---|
| 用户 | vkk6 (UID 83180) |
|---|
| 提交 | 2026-07-06 19時20分 (2 月前) |
|---|
| 管理 | 2026-08-22 11時04分 (2 months later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 394298 [sambitraj Student-Management-System 直到 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 Management Mutation SQL注入] |
|---|
| 积分 | 20 |
|---|