إرسال #112776: Online Computer and Laptop Store SQL injection exists at the deletion point of the brand listالمعلومات

عنوانOnline Computer and Laptop Store SQL injection exists at the deletion point of the brand list
الوصفThis project is entitled Online Computer and Laptop Store . This web application was developed to provide an online platform for a certain computer store or business possible customers for exploring and ordering the products.Version number: v1.0 Source code online address:https://www.sourcecodester.com/php/16397/online-computer-and-laptop-store-using-php-and-mysql-source-code-free-download.html In the backend of the system, there is a function for managing the system's brand list, where you can delete the system's brand list. When deleting, it is done based on the classification ID. However, it was not pre compiled. There is also no filtering of user input content, and there is SQL injection. Malicious users can splice SQL statements to cause harm to the platform.
المصدر⚠️ https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/2-%20SQL%20injection%20exists%20at%20the%20deletion%20point%20of%20the%20brand%20list.pdf
المستخدم ddea (UID 38989)
ارسال11/04/2023 05:21 PM (3 سنوات منذ)
الاعتدال11/04/2023 06:36 PM (1 hour later)
الحالةمكرر
إدخال VulDB225338 [SourceCodester Online Computer and Laptop Store 1.0 brand.php delete_brand id حقن SQL]
النقاط0

Do you know our Splunk app?

Download it now for free!