| शीर्षक | Taokeyun Taokeyun ≤1.0.5 SQL Injection |
|---|
| विवरण | The Taokeyun software, version 1.0.5 and below, has been identified with a SQL Injection vulnerability. This vulnerability resides in the 'Drs.php' file within the 'login' function where user input parameter 'cid' is directly concatenated into a SQL query. This insecure practice allows an attacker to manipulate the SQL query by injecting malicious payloads, such as 'or sleep(5)', leading to potential unauthorized access to sensitive data. This vulnerability has been confirmed by the bug author, glzjin, and poses a serious risk to systems running the affected versions of the software. |
|---|
| स्रोत | ⚠️ https://note.zhaoj.in/share/0KtyJccrP3Ba |
|---|
| उपयोगकर्ता | glzjin (UID 59815) |
|---|
| सबमिशन | 11/01/2024 08:14 AM (3 साल पहले) |
|---|
| संयम | 12/01/2024 12:11 PM (1 day later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 250585 [Taokeyun तक 1.0.5 HTTP POST Request Drs.php index cid SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|