| عنوان | code-projects Online Product Reservation system V1.0 SQL Injection |
|---|
| الوصف | A critical SQL injection vulnerability exists in the user login functionality. The application directly concatenates user input into SQL query without validation, allowing attackers to bypass authentication completely and extract sensitive user data. |
|---|
| المصدر | ⚠️ https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_login.php.md |
|---|
| المستخدم | Ho Cherry (UID 94105) |
|---|
| ارسال | 03/01/2026 12:16 PM (10 أشهر منذ) |
|---|
| الاعتدال | 04/01/2026 08:01 AM (20 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 339475 [code-projects Online Product Reservation System 1.0 User Login app/user/login.php emailadd حقن SQL] |
|---|
| النقاط | 16 |
|---|