| عنوان | https://www.sourcecodester.com/ php task management system 1.0 SQL Injection |
|---|
| الوصف | A vulnerability classified as critical has been discovered in the php task management system. This affects the file edit-task.php. Operations on parameter task_id result in sql injection. The main reason is that the program does not judge and process the legitimacy of the user input data, resulting in an attacker can add additional SQL statements to the predefined SQL statements in the Web application, and achieve illegal operations without the knowledge of the administrator, so as to deceive the database server to perform unauthorized arbitrary queries. Thus further access to data information. |
|---|
| المصدر | ⚠️ https://github.com/thisissuperann/Vul/blob/main/PHP%20Task%20Management%20System%201.0-sql1 |
|---|
| المستخدم | liuann (UID 67227) |
|---|
| ارسال | 02/04/2024 11:49 PM (3 سنوات منذ) |
|---|
| الاعتدال | 03/04/2024 07:09 AM (7 hours later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 259070 [SourceCodester PHP Task Management System 1.0 edit-task.php task_id حقن SQL] |
|---|
| النقاط | 0 |
|---|