Zhang Qi

**Name of the Vulnerable Software and Affected Versions** Sourcecodester Basic Library System versão 1.0 **Description** Existe um problema onde a aplicação é suscetível a SQL Injection, uma técnica que permite a um invasor interferir nas consultas que uma aplicação faz ao seu banco de dados. Isso ocorre no endpoint '/librarysystem/load book.php'. **Recommendations** Como medida paliativa temporária, restrinja o acesso ao endpoint '/librarysystem/load book.php' para minimizar o risco de exploração. No momento, não há informações sobre uma versão mais recente que contenha a correção para esta vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** Sourcecodester Basic Library System versão 1.0 **Description** Existe um problema onde a aplicação é suscetível a SQL Injection, uma técnica que permite a um invasor interferir nas consultas que uma aplicação faz ao seu banco de dados. Isso ocorre no endpoint '/librarysystem/load student.php'. **Recommendations** No momento, não há informações sobre uma versão mais recente que contenha a correção para esta vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** Simple Student Alumni System version 1.0 **Description** The Simple Student Alumni System is susceptible to SQL Injection. This issue affects the `/TracerStudy/recordteacher view.php` script when handling the `teacherID` parameter. Exploitation may allow an attacker to manipulate database queries, potentially leading to unauthorized access, data modification, or system compromise. **Recommendations** Apply appropriate input validation and sanitization techniques to the `teacherID` parameter in the `/TracerStudy/recordteacher view.php` script. Consider using parameterized queries or prepared statements to prevent SQL Injection attacks.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Student Alumni System version 1.0 **Description** The software contains a SQL Injection flaw in the `/TracerStudy/recordteacher edit.php` file. The vulnerability exists due to insufficient sanitization of user-supplied input. The vulnerable parameter is not specified. The `recordteacher edit.php` file is susceptible to exploitation via crafted input. **Recommendations** Apply input validation and parameterized queries to the `/TracerStudy/recordteacher edit.php` file to prevent SQL Injection.

**Name of the Vulnerable Software and Affected Versions** sourcecodester Personnel Property Equipment System version 1.0 **Description** The software is susceptible to SQL Injection through the `/ppes/admin/edit tecnical user.php` endpoint. The vulnerability allows for potential unauthorized access or modification of data. The vulnerable parameter is not specified. **Recommendations** Apply appropriate input validation and sanitization techniques to the `/ppes/admin/edit tecnical user.php` endpoint to prevent SQL Injection attacks.

**Name of the Vulnerable Software and Affected Versions** sourcecodester Personnel Property Equipment System version 1.0 **Description** The software is susceptible to SQL Injection in the '/ppes/admin/edit employee.php' endpoint. The vulnerability exists due to insufficient input validation when processing data submitted to this endpoint. The vulnerable parameter is not explicitly identified. **Recommendations** Apply appropriate input validation and sanitization techniques to all data submitted to the '/ppes/admin/edit employee.php' endpoint.