Description
A vulnerability was identified in Campcodes Society Membership Information System 1.0. This issue affects some unknown processing of the file /check_student.php. Such manipulation of the argument student_id leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Campcodes | Society Membership Information System | 1.0 | — |
References
- VDB-325209 | Campcodes Society Membership Information System check_student.php sql injection vdb-entry technical-description
- VDB-325209 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #657937 | https://www.campcodes.com society-membership-information-system-using-php-mysqli-source-code 1.0 SQL Injection third-party-advisory
- https://www.yuque.com/yuqueyonghuexlgkz/zepczx/mri9nrk1lh7ev7r6?singleDoc exploit
- https://www.campcodes.com/ product