| Titre | online-banking web 1 SQL Injection |
|---|
| Description | The vulnerability in the online-banking system at https://github.com/RashminDungrani/online-banking?tab=readme-ov-file#screenshots stems from the fact that the login verification logic in the auth_login.php file does not use parameterized queries (prepared statements). The user-input parameters username and password are directly concatenated into the SQL statement, enabling attackers to tamper with the SQL query logic by constructing malicious inputs, thereby achieving login bypass or data theft. |
|---|
| La source | ⚠️ https://github.com/BrillBigbang/hole-gap/blob/main/online-banking-have-sql.docx |
|---|
| Utilisateur | Brill (UID 92630) |
|---|
| Soumission | 21/11/2025 07:51 (il y a 11 mois) |
|---|
| Modérer | 06/12/2025 18:15 (15 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 334612 [RashminDungrani online-banking auth_login.php username injection SQL] |
|---|
| Points | 20 |
|---|