| عنوان | CodeAstro Real Estate Management System 1.0 SQL Injection |
|---|
| الوصف | An SQL injection vulnerability exists in the id parameter of the /aboutedit.php page within the admin panel of the application. This vulnerability allows an attacker to manipulate the SQL query executed by the server by injecting malicious SQL code through the id parameter. |
|---|
| المصدر | ⚠️ https://github.com/EmilGallajov/zero-day/blob/main/codeastro_real_estate_ms_sqli.md |
|---|
| المستخدم | egsec (UID 77043) |
|---|
| ارسال | 08/11/2024 10:02 AM (2 سنوات منذ) |
|---|
| الاعتدال | 10/11/2024 09:31 AM (2 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 283804 [CodeAstro Real Estate Management System حتى 1.0 About Us Page /aboutedit.php id حقن SQL] |
|---|
| النقاط | 17 |
|---|