| عنوان | Code-projects travel-management-system v1.0 SQL Injection |
|---|
| الوصف | Due to the lack of purification or parameterization of PID parameters, attackers can inject malicious SQL code to manipulate database queries. By utilizing the SQL injection technique of UNION query, attackers can use functions such as UNION to directly query the fields required by the database. This can be used to confirm the existence of vulnerabilities and potentially extract sensitive information from the database. |
|---|
| المصدر | ⚠️ https://github.com/Huandtx/cve/blob/main/cve/sql1.md |
|---|
| المستخدم | huandtx (UID 79079) |
|---|
| ارسال | 04/01/2025 06:56 AM (2 سنوات منذ) |
|---|
| الاعتدال | 04/01/2025 08:45 PM (14 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 290225 [code-projects Travel Management System 1.0 /enquiry.php pid/t1/t2/t3/t4/t5/t6/t7 حقن SQL] |
|---|
| النقاط | 19 |
|---|