| عنوان | code-projects Online Lot Reservation System 1.0 SQL Injection |
|---|
| الوصف | An SQL injection vulnerability was found in the loginuser.php file. Attackers can inject malicious SQL code through the email and password parameters. The system directly concatenates user input to the SQL query statement for execution without using prepared statements or input filtering, which enables attackers to bypass authentication. |
|---|
| المصدر | ⚠️ https://github.com/zzk6th/cve/issues/1 |
|---|
| المستخدم | z0ng (UID 96775) |
|---|
| ارسال | 09/04/2026 01:50 PM (4 أشهر منذ) |
|---|
| الاعتدال | 26/04/2026 09:18 PM (17 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 359730 [code-projects Online Lot Reservation System حتى 1.0 /loginuser.php email/password حقن SQL] |
|---|
| النقاط | 19 |
|---|