| शीर्षक | BP Monitoring Management System v1.0 Password Recovery SQL Injection |
|---|
| विवरण | A vulnerability classified as severe has been discovered in BP Monitoring Management System v1.0. The vulnerability appears in the password recovery. php file to retrieve user passwords. Operations on parameters contactno, emailid, and newpassword can all cause SQL injection, which can control SQL queries and lead to database information leakage. This will pose a serious threat to system security and sensitive data within the system. Even disrupted the normal use of the system! |
|---|
| स्रोत | ⚠️ https://github.com/vsdwef/BP-Monitoring-Management-System/blob/main/password-recovery.php_SQL_English.pdf |
|---|
| उपयोगकर्ता | dbapp.jy (UID 44542) |
|---|
| सबमिशन | 08/04/2023 05:55 AM (4 साल पहले) |
|---|
| संयम | 08/04/2023 08:12 AM (2 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 225337 [PHPGurukul BP Monitoring Management System 1.0 Password Recovery password-recovery.php emailid/contactno SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|