| عنوان | code-projects Public Chat Room 1.0 SQL Injection |
|---|
| الوصف | This vulnerability exists in the "send_message.php" file, where the id parameter submitted by the user is directly concatenated into a SQL query without proper escaping or parameterization. An attacker can craft malicious SQL statements and inject them via POST requests to bypass authentication, retrieve sensitive database information, or manipulate the database. |
|---|
| المصدر | ⚠️ https://github.com/kbhjt/cve/issues/3 |
|---|
| المستخدم | kbhjt (UID 88144) |
|---|
| ارسال | 22/07/2025 09:56 AM (1 سنة منذ) |
|---|
| الاعتدال | 25/07/2025 09:02 AM (3 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 317578 [code-projects Public Chat Room 1.0 send_message.php معرف حقن SQL] |
|---|
| النقاط | 19 |
|---|