| عنوان | Electronic Medical Records System-register.php-Sqlinjection |
|---|
| الوصف | Electronic Medical Records System-register.php-Sqlinjection
There is a receiving pconsultation parameter in the Register file, and it is directly entered into the UPDATE statement without any filtering. Therefore, it can be used by attackers to steal sensitive data.
Detailed instructions：https://github.com/Hanfu-l/Cve-vulnerability-mining/blob/main/Electronic%20Medical%20Records%20System/Electronic%20Medical%20Records%20System-register.php-Sqlinjection.pdf |
|---|
| المصدر | ⚠️ https://github.com/Hanfu-l/Cve-vulnerability-mining/blob/main/Electronic%20Medical%20Records%20System/Electronic%20Medical%20Records%20System-register.php-Sqlinjection.pdf |
|---|
| المستخدم | Hanfu (UID 30648) |
|---|
| ارسال | 06/08/2022 12:23 PM (4 سنوات منذ) |
|---|
| الاعتدال | 06/08/2022 06:55 PM (7 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 205816 [SourceCodester Electronic Medical Records System UPDATE Statement register.php pconsultation حقن SQL] |
|---|
| النقاط | 20 |
|---|