| عنوان | code-projects Web-Based Inventory and POS System 1.0 SQL Injection |
|---|
| الوصف | SQL injection allows attackers to read, modify or delete sensitive data, bypass authentication, execute system commands and cause data breaches that result in legal and financial damage.
In the login.php file of pos-system, the emailid parameters are obtained, and the SQL statement is concatenated to the SQL statement without filtering the execution, resulting in SQL injection vulnerabilities and server permissions |
|---|
| المصدر | ⚠️ https://github.com/Real-Rio/vulnreport/blob/main/SQL6.md |
|---|
| المستخدم | riovulntest (UID 91065) |
|---|
| ارسال | 01/10/2025 08:13 AM (10 أشهر منذ) |
|---|
| الاعتدال | 07/10/2025 01:41 PM (6 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 327359 [code-projects Web-Based Inventory and POS System 1.0 /login.php emailid حقن SQL] |
|---|
| النقاط | 20 |
|---|