| Titre | haxxorsid stock-management-system 1.0 SQL Injection |
|---|
| Description | haxxorsid/stock-management-system uses string concatenation to construct SQL statements to query data, but does not filter all the variables involved in concatenation, resulting in unauthorized users can inject malicious SQL statements to query sensitive data or perform malicious database operations. |
|---|
| La source | ⚠️ https://github.com/ixpqxi/CVE_LIST/blob/master/stock_management_system/sql_injection_vulnerability.md |
|---|
| Utilisateur | ixpqxi (UID 83247) |
|---|
| Soumission | 01/12/2025 04:00 (il y a 10 mois) |
|---|
| Modérer | 12/12/2025 12:14 (11 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 336192 [haxxorsid Stock-Management-System model/User.php employee_id/id/admin injection SQL] |
|---|
| Points | 17 |
|---|