| Título | SourceCodester Sourcecodester Online Car Driving School Management System 1.0 SQL injection |
|---|
| Descripción | After receiving the id parameter passed in through the get method in the view_details.php file, it is directly spliced into the SQL query statement for execution without any security filtering. An attacker can use this parameter to perform SQL injection to read arbitrary database information. |
|---|
| Fuente | ⚠️ https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-2.md |
|---|
| Usuario | BFS-Lab (UID 73306) |
|---|
| Sumisión | 2024-08-10 06:23 (hace 2 años) |
|---|
| Moderación | 2024-08-10 10:19 (4 hours later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 274122 [SourceCodester Car Driving School Management System 1.0 view_details.php ID inyección SQL] |
|---|
| Puntos | 18 |
|---|