| عنوان | sourcecodester Survey Application System 1.0 SQL Injection |
|---|
| الوصف | The application constructs SQL by concatenating user-supplied POST values into the $data string then interpolates that into an UPDATE statement. Identifiers and values are not parameterized. Escaping (escapeString()) is used in places but interpolation remains. This allows an attacker to alter SQL logic by injecting SQL syntax into fullname (or any POST field concatenated into $data). |
|---|
| المصدر | ⚠️ https://github.com/lakshayyverma/CVE-Discovery/blob/main/Survey%20Application%20System.md |
|---|
| المستخدم | lakshay12311 (UID 91298) |
|---|
| ارسال | 24/10/2025 01:54 PM (12 أشهر منذ) |
|---|
| الاعتدال | 09/11/2025 02:02 PM (16 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 331649 [SourceCodester Survey Application System 1.0 /LoginRegistration.php save_user/update_user fullname حقن SQL] |
|---|
| النقاط | 20 |
|---|