CVE:CVE-2021-25212
CNNVD:CNNVD-202107-1767
Sourcecodester Alumni Management System是美国Sourcecodester公司的一个基于Php、Mysql的校友管理系统。
SourceCodester Alumni Management System 1.0版本存在SQL注入漏洞，远程攻击者可利用该漏洞通过id参数来管理event.php执行任意SQL语句。
solution:Upgrade alumni_management_system_project alumni_management_system to a higher version than 1.0,and avoid the version 1.0