| عنوان | chaitak-gorai blogbook latest version as of 2025/05/22 SQL Injection |
|---|
| الوصف | The BlogBook application is vulnerable to SQL injection via the `u_id` parameter in the `user.php` script. An unauthenticated attacker can exploit this vulnerability by providing a specially crafted `u_id` value in the URL. This allows the attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access, modification, or deletion, and in some configurations, remote code execution. |
|---|
| المصدر | ⚠️ https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20user.php%20u_id%20Parameter%20SQL%20Injection.md |
|---|
| المستخدم | bpy9ft (UID 85221) |
|---|
| ارسال | 22/05/2025 05:33 AM (1 سنة منذ) |
|---|
| الاعتدال | 31/05/2025 06:13 PM (10 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 310740 [chaitak-gorai Blogbook حتى 92f5cf90f8a7e6566b576fe0952e14e1c6736513 GET Parameter /user.php u_id حقن SQL] |
|---|
| النقاط | 20 |
|---|