| عنوان | Limbas Limbas 5.2.14 Blind SQL injection |
|---|
| الوصف | After logging in(default:admin/limbas), on the "/main_admin.php?action=setup_gtab_ftype&group_bzm=&tab_group=1&atid=2" page, the parameter "tab_group" has the risk of blind SQL injection. It is recommended to take defensive measures such as input validation or parameterized query for SQL statements. Exploiting this vulnerability could enable an attacker to take control of the application, alter or access data, or leverage recent vulnerabilities present in the underlying database. |
|---|
| المصدر | ⚠️ https://github.com/liyako/vulnerability/blob/main/POC/Limbas-Blind-SQL-injection.md |
|---|
| المستخدم | cotool (UID 63610) |
|---|
| ارسال | 14/02/2024 09:33 AM (3 سنوات منذ) |
|---|
| الاعتدال | 22/02/2024 08:02 PM (8 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 254575 [Limbas 5.2.14 main_admin.php tab_group حقن SQL] |
|---|
| النقاط | 20 |
|---|