Headline

CVE-2021-45348: Attendance Management System using PHP with Source Code

An Arbitrary File Deletion vulnerability exists in SourceCodester Attendance Management System v1.0 via the csv parameter in admin/pageUploadCSV.php, which can cause a Denial of Service (crash).

2 years ago

CVE

Open in Source

#sql #vulnerability #web #dos #apache #java

Submitted by razormist on Friday, February 5, 2021 - 10:22.

The Attendance Management System with Source Code is a PHP project that can maintain daily attendance records easily and conveniently. This system was created using PHP, HTML, MYSQLi, and Javascript.

This application is easy to use, the user has access to all data that is related to student information. You can view the details and add some new information for courses, units, etc. The system data/lists can be printed and exported to CSV, Excel, and PDF. The administrator can manipulate the information and also maintain the security of the system. Database backups can also be generated through admin permission.

****Features****

Manage Courses
Manage Units
Manage Student
Manage Attendance
Manage Website Settings
Manage User Accounts
Manage User Groups

****How to Run****

Requirements

Download and Install any local web server such as XAMPP/WAMP.
Download and Extract the source code zip file.

Installation

Open the XAMPP/WAMP’s Control Panel and start “Apache” and “MySQL”.
If you are using XAMPP, copy the extracted folder and paste it into the XAMPP’s “htdocs” directory. If you are using WAMP, paste it into the “www” directory.
Locate the SQL file in the extracted source code folder. The SQL file is known as “attendance_management.sql” and located inside the “db” folder.
Open a web browser and browse the PHPMyAdmin. (http://localhost/phpmyadmin)
Create a new database naming “attendance_management”.
Import the SQL file to your newly created database.
Open a web browser and browse the web application. (http://localhost/Attendance%20Management%20System/)