| عنوان | phpgurukul Employee Record Management System 1.3 SQL Injection |
|---|
| الوصف | An authenticated SQL injection vulnerability exists in the Employee Record Management System (ERMS) within admin/adminprofile.php. The AdminName parameter is directly concatenated into an SQL query without input sanitization or prepared statements. An authenticated attacker can exploit this to execute arbitrary SQL commands, potentially extracting or modifying database contents. |
|---|
| المصدر | ⚠️ https://github.com/cryptokhush/Employee-Record-Management-System/blob/main/README.md |
|---|
| المستخدم | devcypher (UID 88930) |
|---|
| ارسال | 11/08/2025 06:51 PM (10 أشهر منذ) |
|---|
| الاعتدال | 16/08/2025 08:01 AM (5 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 311581 [PHPGurukul Employee Record Management System 1.3 /admin/adminprofile.php AdminName حقن SQL] |
|---|
| النقاط | 0 |
|---|