| عنوان | code-projects NEWS-BUZZ (News Management System) 1.0 SQL Injection |
|---|
| الوصف | There is a time-based SQL injection vulnerability in the login part of the index.php file. It allows an attacker to manipulate the SQL query and potentially perform unauthorized actions on the database. Additionally, with the malicious code, the program slows down for a period of time set in the function. |
|---|
| المصدر | ⚠️ https://github.com/EmilGallajov/zero-day/blob/main/content_management_system_sqli.md |
|---|
| المستخدم | egsec (UID 77043) |
|---|
| ارسال | 02/11/2024 11:17 PM (2 سنوات منذ) |
|---|
| الاعتدال | 03/11/2024 08:30 AM (9 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 282927 [code-projects/anirbandutta9 Content Management System/News-Buzz 1.0 /index.php user_name حقن SQL] |
|---|
| النقاط | 17 |
|---|