| عنوان | keerti1924 Online-Book-Store-Website 1.0 SQL Injection |
|---|
| الوصف | The 'search.php' script in keerti1924's Online-Book-Store-Website is vulnerable to SQL Injection, allowing attackers to execute arbitrary SQL commands and gain unauthorized access to the underlying database. This could lead to unauthorized data disclosure, data manipulation, and potential data loss, compromising the confidentiality, integrity, and availability of the system and its data. By injecting a crafted payload into the 'search' parameter, an attacker can exploit this vulnerability to retrieve sensitive information from the database, such as version details. To mitigate this issue, developers should implement robust input validation and parameterized queries to sanitize user input and prevent SQL Injection attacks. Regular security assessments and code reviews are also recommended to detect and remediate such vulnerabilities in the application's codebase. |
|---|
| المصدر | ⚠️ https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/keerti1924%20Online-Book-Store-Website/SQL%20Injection%20Search/SQL%20Injection%20in%20search.php%20.md |
|---|
| المستخدم | nochizplz (UID 64302) |
|---|
| ارسال | 25/02/2024 05:15 PM (3 سنوات منذ) |
|---|
| الاعتدال | 07/03/2024 03:35 PM (11 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 256039 [keerti1924 Online-Book-Store-Website 1.0 /search.php البحث حقن SQL] |
|---|
| النقاط | 20 |
|---|