Description
1000 Projects Attendance Tracking Management System是1000 Projects开源的一个考勤管理系统。 1000 Projects Attendance Tracking Management System 1.0版本存在注入漏洞，该漏洞源于/admin/attendance_action.php文件的attendance_id参数包含一个SQL注入漏洞。
1000 Projects Attendance Tracking Management System 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2024-12940
https://cve.imfht.com/detail/CVE-2025-0536
https://www.knowsafe.com/ti/info/0/992045
https://vulners.com/cvelist/CVELIST:CVE-2024-12497
https://www.sentinelone.com/vulnerability-database/cve-2024-12927/
https://vuldb.com/zh/?id.287874
https://github.com/Hacker0xOne/CVE/issues/18
https://www.cvedetails.com/cve/CVE-2024-13037/
https://cert.kenet.or.ke/cve-2024-12946-1000-projects-attendance-tracking-management-system-sql-injection-vulnerability
https://nvd.nist.gov/vuln/detail/CVE-2024-12940