| عنوان | code-projects Chat System 1.0.0.00 SQL Injection |
|---|
| الوصف | In the file 'update_user.php' located at /admin/update_user.php, there is a possibility of performing SQL injection on the 'name and id' parameter. This allows attackers to inject malicious SQL code into the query. For example, if the name and id parameter is set to:
error-based:
script=1' AND 4381=(SELECT (CASE WHEN (4381=4381) THEN 4381 ELSE (SELECT 6122 UNION SELECT 5924) END))-- - |
|---|
| المصدر | ⚠️ https://code-projects.org/chat-system-using-php-source-code/ |
|---|
| المستخدم | Havook (UID 71104) |
|---|
| ارسال | 28/12/2024 04:18 PM (2 سنوات منذ) |
|---|
| الاعتدال | 29/12/2024 04:38 PM (1 day later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 289768 [code-projects Chat System 1.0 /admin/update_user.php id حقن SQL] |
|---|
| النقاط | 20 |
|---|