| عنوان | phpgurukul.com Curfew e-Pass Management System 1.0 sql |
|---|
| الوصف | A SQL injection vulnerability was discovered in the "/admin/search-pass.php" file of the "Curfew Electronic Pass Management System" project. The cause of this issue was that the attacker injected malicious code from the "searchdata" POST parameter and directly used it in the SQL query without any necessary cleaning or validation. This allowed the attacker to forge input values, thereby modifying the SQL query and performing unauthorized operations. |
|---|
| المصدر | ⚠️ https://github.com/cowhrk/CVE/issues/1 |
|---|
| المستخدم | chenfei13124 (UID 98107) |
|---|
| ارسال | 13/05/2026 09:24 AM (5 أشهر منذ) |
|---|
| الاعتدال | 31/05/2026 08:16 PM (18 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 299880 [PHPGurukul Curfew e-Pass Management System 1.0 /admin/search-pass.php searchdata حقن SQL] |
|---|
| النقاط | 0 |
|---|