漏洞标题
SourceCodester 简单学生考勤系统 class_form.php sql 注入
漏洞描述信息
在SourceCodester Simple Student Attendance System 1.0中发现了一个漏洞。该漏洞被评定为关键。受到影响的是文件/modals/class_form.php中某些未知的功能。对参数id的操纵可能导致SQL注入。该漏洞利用已经被公开,可以使用。该漏洞的标识符是VDB-247256。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
漏洞标题
SourceCodester Simple Student Attendance System class_form.php sql injection
漏洞描述信息
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /modals/class_form.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-247256.
CVSS信息
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
漏洞类别
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
漏洞标题
SourceCodester Simple Student Attendance System SQL注入漏洞
漏洞描述信息
Simple Student Attendance System是一个简单的学生考勤系统。 SourceCodester Simple Student Attendance System 1.0版本存在SQL注入漏洞,该漏洞源于文件/modals/class_form.php存在SQL注入漏洞。
CVSS信息
N/A
漏洞类别
SQL注入