| शीर्षक | SourceCodester Resort Reservation System 1.0 has a SQL Injection vulnerability in manage_user.php |
|---|
| विवरण | SourceCodester Resort Reservation System 1.0 has a SQL Injection vulnerability in manage_user.php. Affected is file manage_user.php, the manipulation of the argument id leads to SQL injection after users logged in.When the boolean value is true, the keyword "Update User Details" will appear on the page. Based on this feedback, a remote attacker can exploit SQL boolean-based blind injection to retrieve all data from the database. |
|---|
| स्रोत | ⚠️ https://github.com/Yesec/Resort-Reservation-System/blob/main/SQL%20Injection%20in%20manage_user.php/vuln.md |
|---|
| उपयोगकर्ता | YeSec (UID 50956) |
|---|
| सबमिशन | 06/08/2023 10:17 AM (3 साल पहले) |
|---|
| संयम | 06/08/2023 03:49 PM (6 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 236235 [SourceCodester Resort Reservation System 1.0 manage_user.php id SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|