8 matches found
CVE-2025-66947
CVE-2025-66947 krishanmuraiji SMS v1.0 中的基于时间的盲SQL注入 ⏱️ 视觉效果对比：正常响应 vs 约6秒延迟响应 🔍 摘要 TL;DR: 管理员模块中的GET参数通过响应延迟实现了基于时间的SQL注入。 在 krishanmuraiji SMS v1.0 中存在一个基于时间的盲SQL注入漏洞 ，原因是管理模块中一个GET参数未经过恰当的验证。 🎯 受影响组件 文件: /studentms/admin/edit-class-detail.php 参数: editid GET 问题: 未经过滤的输入直接用于SQL查询 🧪 概念验证 PoC 第一步 —...
CVE-2025-66947
SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP to infer database contents. Successful exploitation may lead to full database compromise, especially...
CVE-2025-66947
SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP to infer database contents. Successful exploitation may lead to full database compromise, especially...
CVE-2025-66947
SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP to infer database contents. Successful exploitation may lead to full database compromise, especially...
EUVD-2025-205435
SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP to infer database contents. Successful exploitation may lead to full database compromise, especially...
PT-2025-53593
Name of the Vulnerable Software and Affected Versions krishanmuraiji SMS version 1.0 Description A SQL injection issue exists in krishanmuraiji SMS version 1.0. The issue is located within the '/studentms/admin/edit-class-detail.php' file and is triggered through the editid GET parameter. An...
CVE-2025-66947
SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP to infer database contents. Successful exploitation may lead to full database compromise, especially...
