إرسال #473107: code-projects job-recruitment-php v1.0 Sql injectionالمعلومات

عنوانcode-projects job-recruitment-php v1.0 Sql injection
الوصفThere is a sql injection vulnerability in the system. The parameters that can be controlled: $person parameter. This function executes the jobtitle parameter into the SQL statement without any restrictions. A malicious attacker could exploit this vulnerability to obtain sensitive information in the server database.
المصدر⚠️ https://github.com/UnrealdDei/cve/blob/main/sql11.md
المستخدم
 UnrealDawn (UID 76912)
ارسال01/01/2025 08:19 AM (2 سنوات منذ)
الاعتدال01/01/2025 08:49 AM (30 minutes later)
الحالةتمت الموافقة
إدخال VulDB289917 [code-projects Job Recruitment 1.0 _feedback_system.php person حقن SQL]
النقاط19

Want to stay up to date on a daily basis?

Enable the mail alert feature now!