CVE-2020-35270

Student Result Management System In PHP With Source Code is affected by SQL injection

published January 25, 2021

CVSS
—
EPSS
2%
Percentile
79.1
In the wild
Unconfirmed
What it is

🚨 An SQL injection vulnerability lets anyone access the Admin Panel of the Student Result Management System like an unattended file cabinet! 📂 Imagine a school where anyone can just walk into the principal's office and change grades at will—not exactly ideal for maintaining order, right? That's what this SQL injection allows! An attacker could stroll right in and manage every account in the system, potentially altering student results or accessing sensitive information. It's a recipe for chaos and could undermine the trust in the entire academic institution.

Put simply

Imagine a school where anyone can just walk into the principal's office and change grades at will—not exactly ideal for maintaining order, right? That's what this SQL injection allows! This vulnerability allows attackers to inject malicious SQL queries into the database, thereby gaining unauthorized access to the Admin Panel and manipulating user accounts.

What to do

An attacker could stroll right in and manage every account in the system, potentially altering student results or accessing sensitive information. It's a recipe for chaos and could undermine the trust in the entire academic institution. To patch this, immediately update the system to the latest version if available. Implement parameterized queries and prepared statements to prevent SQL injection attacks. Regularly audit your code for vulnerabilities and ensure proper access controls are in place. You've got this! By following these steps, you can lock down your system and protect those precious student records. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01862 · 79.1th percentile
Published
2021-01-25T14:40Z
EPSS history
Timeline
  • 25 JAN 14:40Z
    Student Result Management System In PHP With Source Code is affected by SQL injection
    cvelistv5