| Titre | chaitak-gorai blogbook latest version as of 2025/05/22 SQL Injection |
|---|
| Description | The BlogBook application is vulnerable to SQL injection via the `u_id` parameter in the `user.php` script. An unauthenticated attacker can exploit this vulnerability by providing a specially crafted `u_id` value in the URL. This allows the attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access, modification, or deletion, and in some configurations, remote code execution. |
|---|
| La source | ⚠️ https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20user.php%20u_id%20Parameter%20SQL%20Injection.md |
|---|
| Utilisateur | bpy9ft (UID 85221) |
|---|
| Soumission | 22/05/2025 05:33 (il y a 1 Année) |
|---|
| Modérer | 31/05/2025 18:13 (10 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 310740 [chaitak-gorai Blogbook GET Parameter /user.php u_id injection SQL] |
|---|
| Points | 20 |
|---|