| Título | CodeAstro Real Estate Management System 1.0 SQL Injection |
|---|
| Descripción | An SQL injection vulnerability exists in the id parameter of the /aboutedit.php page within the admin panel of the application. This vulnerability allows an attacker to manipulate the SQL query executed by the server by injecting malicious SQL code through the id parameter. |
|---|
| Fuente | ⚠️ https://github.com/EmilGallajov/zero-day/blob/main/codeastro_real_estate_ms_sqli.md |
|---|
| Usuario | egsec (UID 77043) |
|---|
| Sumisión | 2024-11-08 10:02 (hace 2 años) |
|---|
| Moderación | 2024-11-10 09:31 (2 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 283804 [CodeAstro Real Estate Management System hasta 1.0 About Us Page /aboutedit.php id inyección SQL] |
|---|
| Puntos | 17 |
|---|