| शीर्षक | boyiddha Automated-Mess-Management-System 1.0 SQL Injection |
|---|
| विवरण | The vulnerability in the Automated-Mess-Management-System's /member/view.php endpoint enables SQL Injection attacks. By injecting crafted SQL payloads into the 'date' parameter, attackers can manipulate SQL queries executed by the application. This could lead to unauthorized access to sensitive information, data leakage, or even complete database compromise. Remediating this issue involves implementing proper input validation and using parameterized queries to prevent SQL Injection attacks. Additionally, access controls should be enforced to limit user privileges and mitigate the impact of such vulnerabilities. |
|---|
| स्रोत | ⚠️ https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/boyiddha%20utomated-Mess-Management-System/SQL%20Injection%20member-view.php%20.md |
|---|
| उपयोगकर्ता | nochizplz (UID 64302) |
|---|
| सबमिशन | 26/02/2024 05:14 PM (3 साल पहले) |
|---|
| संयम | 07/03/2024 05:04 PM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 256050 [boyiddha Automated-Mess-Management-System 1.0 /member/view.php तारीख SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|