| عنوان | SMSot SMSot <=2.12 SQL Injection |
|---|
| الوصف | The 'get.php' file in the SMSot software version 2.12 and below, hosted on fours.smsot.com, is susceptible to SQL Injection attacks. This vulnerability exists due to the direct concatenation of the 'cid' parameter into the SQL query. An attacker can exploit this flaw by manipulating the 'cid' parameter in the HTTP GET request, potentially gaining unauthorized access to sensitive information from the database. |
|---|
| المصدر | ⚠️ https://note.zhaoj.in/share/vo1KOw3EYmBK |
|---|
| المستخدم | glzjin (UID 59815) |
|---|
| ارسال | 18/01/2024 10:40 AM (3 سنوات منذ) |
|---|
| الاعتدال | 19/01/2024 12:25 PM (1 day later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 251557 [Smsot حتى 2.12 /get.php tid حقن SQL] |
|---|
| النقاط | 19 |
|---|