| शीर्षक | SQL injection vulnerability exists in Master.php in php-sqlite-gpa-calculator |
|---|
| विवरण | In the php-sqlite-gpa-calculator project released yesterday, users can construct malicious statements in Master.php to perform sql injection, because the a parameter and perc parameter in the code are controllable
It can be seen that the value of perc depends entirely on how we pass parameters. If we pass parameters as perc=1'='1' union select 1,2,3,sqlite_version(),1+2;, then we can control this sql Inject, and get the version of the database
project url:https://www.sourcecodester.com/php/16373/grade-point-average-gpa-calculator-php-and-sqlite3-source-code-free-download.html |
|---|
| स्रोत | ⚠️ https://github.com/Pe4cefulSnow/SQL-Injection/blob/main/README.md |
|---|
| उपयोगकर्ता | Pe4cefulSnow (UID 34389) |
|---|
| सबमिशन | 31/03/2023 07:22 AM (4 साल पहले) |
|---|
| संयम | 31/03/2023 12:30 PM (5 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 224671 [SourceCodester Grade Point Average GPA Calculator 1.0 Master.php get_scale perc SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|