| शीर्षक | Cxbsoft UrlShorting ≤v1.3.1 SQL Injection |
|---|
| विवरण | The URL shortening application "UrlShorting" is vulnerable to SQL Injection due to the insecure handling of user input in the `long_s_short.php` page. Specifically, the `longurl` parameter is concatenated directly into an SQL query without proper sanitization or prepared statements. This vulnerability, found by the researcher glzjin in versions up to and including 1.3.1, allows an attacker to manipulate the SQL query and potentially access or alter the database by sending a crafted request, as demonstrated by the provided POST request example. |
|---|
| स्रोत | ⚠️ https://note.zhaoj.in/share/9tjcunCPidgI |
|---|
| उपयोगकर्ता | glzjin (UID 59815) |
|---|
| सबमिशन | 04/01/2024 11:43 AM (3 साल पहले) |
|---|
| संयम | 14/01/2024 05:29 PM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 250695 [CXBSoft Url-shorting तक 1.3.1 HTTP POST Request /pages/long_s_short.php longurl SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|