| शीर्षक | PHPGurukul Hospital Management System 1.0 SQL injection |
|---|
| विवरण | A SQL injection vulnerability exists in the contact us page of a hospital management system web application, specifically affecting the Fullname and email address input fields. Exploiting this vulnerability allows an attacker to inject malicious SQL code, potentially leading to unauthorized data access, manipulation, authentication bypass, elevation of privilege, and denial of service. Mitigation measures include implementing parameterized queries, robust input validation, the least privilege principle, and the use of web application firewalls. |
|---|
| स्रोत | ⚠️ https://drive.google.com/file/d/1BgQYTwpvPTaUO-3xt4XdgRlAeoXlH-gD/view?usp=sharing |
|---|
| उपयोगकर्ता | mallutrojan (UID 60819) |
|---|
| सबमिशन | 07/01/2024 06:39 PM (3 साल पहले) |
|---|
| संयम | 09/01/2024 03:54 PM (2 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 249843 [PHPGurukul Hospital Management System 1.0 Contact Form index.php#contact_us Name/Email/Message क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|