| عنوان | SourceCodester Inventory System 1.0 SQL Injection |
|---|
| الوصف | A SQL injection vulnerability exists in SourceCodester Inventory System 1.0. The vulnerability is found in the search functionality of the file dashboard.php. The manipulation of the POST parameter 'searchtxt' leads to boolean-based or time-based blind SQL injection. An authenticated attacker can exploit this to infer and exfiltrate database content. |
|---|
| المصدر | ⚠️ https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-Dashboard-searchtxt.md |
|---|
| المستخدم | Anonymous User |
|---|
| ارسال | 26/02/2026 07:21 AM (8 أشهر منذ) |
|---|
| الاعتدال | 08/03/2026 08:24 AM (10 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 349758 [SourceCodester Sales and Inventory System 1.0 Search dashboard.php searchtxt حقن SQL] |
|---|
| النقاط | 19 |
|---|