| عنوان | Codeastro Apartment Visitor Management System V1.0 SQL Injection |
|---|
| الوصف | Codeastro Apartment Visitor Management System V1.0 — SQL Injection in /apartment-visitor/search-result.php.
The searchdata POST parameter is directly concatenated into SQL queries without any sanitization or parameterized binding. The application fails to validate or escape user input before passing it to the database, allowing attackers to forge malicious input that manipulates SQL query logic. |
|---|
| المصدر | ⚠️ https://gist.github.com/menelausx/29aef0a0ab6f289c0f45b379f6d759d7 |
|---|
| المستخدم | JasperX (UID 97281) |
|---|
| ارسال | 06/06/2026 03:43 PM (3 أشهر منذ) |
|---|
| الاعتدال | 05/07/2026 05:56 AM (29 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 376356 [CodeAstro Apartment Visitor Management System 1.0 POST Parameter search-result.php searchdata حقن SQL] |
|---|
| النقاط | 20 |
|---|