| عنوان | SourceCodester Sourcecodester Online Car Driving School Management System 1.0 SQL Injection |
|---|
| الوصف | After receiving the id parameter passed in through the get method in the manage_user.php file, it is directly spliced into the SQL query statement for execution without any security filtering. An attacker can use this parameter to perform SQL injection to read arbitrary database information. |
|---|
| المصدر | ⚠️ https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-1.md |
|---|
| المستخدم | BFS-Lab (UID 73306) |
|---|
| ارسال | 10/08/2024 06:23 AM (2 سنوات منذ) |
|---|
| الاعتدال | 10/08/2024 10:19 AM (4 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 274121 [SourceCodester Car Driving School Management System 1.0 manage_user.php معرف حقن SQL] |
|---|
| النقاط | 18 |
|---|