CourseSelectionSystem SQL注入漏洞

2025-10-01 00:05:07 CourseSelectionSystem PoC No

Description

CourseSelectionSystem是kidaze个人开发者的一个简易网上选课系统。 CourseSelectionSystem存在SQL注入漏洞，该漏洞源于对文件/Profilers/PriProfile/COUNT3s4.php中参数cbranch的错误操作，可能导致SQL注入攻击。

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

https://github.com/evilthan9/cve/issues/2
https://radar.offseq.com/threat/cve-2025-11032-sql-injection-in-kidaze-courseselec-02b5df58
https://vuldb.com/?submit.651941
https://cve.imfht.com/ti_screenshot/2025-09-27/webpage-2025-09-27T16-32-28.415Z-a48bc40661aefc86489b.pdf
https://cve.imfht.com/ti_screenshot/2025-09-27/webpage-2025-09-27T16-32-23.286Z-3890f97f2ff04da7d040.pdf
https://vuldb.com/?submit.649316
https://github.com/limingserverll-wq/cve/issues/3
https://cve.imfht.com/ti_screenshot/2025-09-28/webpage-2025-09-28T16-33-06.446Z-3d62506423abae2e85ee.pdf