| عنوان | SourceCodester Employee Management System 1.0 Sql Injection |
|---|
| الوصف | A critical SQL injection vulnerability exists in the SourceCodester Employee Management System's psubmit.php script, allowing attackers to inject malicious SQL code via the pid parameter. Exploiting this flaw could lead to unauthorized access to sensitive data or modification of database records. Remediation involves implementing input validation and parameterized queries to prevent injection attacks, alongside regular security assessments to maintain robust protection. |
|---|
| المصدر | ⚠️ https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20EMPLOYEE%20MANAGEMENT%20SYSTEM/Employee%20Project%20SQL%20Injection%20Update.md |
|---|
| المستخدم | nochizplz (UID 64302) |
|---|
| ارسال | 24/02/2024 11:49 AM (2 سنوات منذ) |
|---|
| الاعتدال | 25/02/2024 07:30 PM (1 day later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 254724 [SourceCodester Employee Management System 1.0 /psubmit.php pid حقن SQL] |
|---|
| النقاط | 20 |
|---|