Title | code-projects Job-recruitment-in-php v1.0 Sql Injection And write Trojans |
---|
Description | An unrestricted SQL injection attack exists in an Job-recruitment-in-php system in rest.php. The parameters that can be controlled are as follows: e. This function executes the e_log parameter into the SQL statement without any restrictions. A malicious attacker could exploit this vulnerability to obtain sensitive information in the server database. |
---|
Source | ⚠️ https://github.com/Anti-Entropy-Zhurong/cve/blob/main/sql-1.md |
---|
User | TTMSTW (UID 77409) |
---|
Submission | 11/12/2024 10:16 AM (8 months ago) |
---|
Moderation | 11/15/2024 08:20 AM (3 days later) |
---|
Status | Accepted |
---|
VulDB Entry | 284677 [code-projects Job Recruitment 1.0 reset.php e sql injection] |
---|
Points | 19 |
---|