| عنوان | code-projects LifeStyle_Store 1.0 SQL Injection |
|---|
| الوصف | This vulnerability exists in the success.php file, where user-submitted id parameters are directly concatenated into a SQL query without proper escaping or parameterization. An attacker could craft malicious SQL statements and inject them via POST requests to bypass authentication, retrieve sensitive database information, or manipulate the database. |
|---|
| المصدر | ⚠️ https://github.com/lazywack/cve/issues/1 |
|---|
| المستخدم | XenoEcho (UID 87913) |
|---|
| ارسال | 28/07/2025 07:11 PM (1 سنة منذ) |
|---|
| الاعتدال | 30/07/2025 10:27 AM (2 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 315871 [code-projects LifeStyle Store 1.0 /success.php id حقن SQL] |
|---|
| النقاط | 0 |
|---|