| عنوان | SourceCodester Guest Management System in PHP with Full Source Code V1.0 Unrestricted Upload |
|---|
| الوصف | Hefei Coffee has discovered that due to insufficient protection of the "pass" parameter in the "img/user page. PHP" file, "Guest Management System in PHP with Full Source Code" there is a serious security vulnerability in the This vulnerability may be used to inject malicious SQL queries, resulting in unauthorized access and extraction of sensitive information from the database.
The include method in the 16th line of the img\user page.php file retrieves user input from the POST element. Then, the value of this element will be passed to the code without proper purification or validation, and ultimately used for database queries in the include method on line 21 of the img\user page.php file. This may lead to SQL injection attacks. |
|---|
| المصدر | ⚠️ https://github.com/Hefei-Coffee/cve/issues/1 |
|---|
| المستخدم | Hefei-Coffee (UID 68557) |
|---|
| ارسال | 07/05/2024 07:10 PM (2 سنوات منذ) |
|---|
| الاعتدال | 08/05/2024 09:07 AM (14 hours later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 206398 [SourceCodester Guest Management System index.php username/pass حقن SQL] |
|---|
| النقاط | 0 |
|---|