| शीर्षक | sourcecodester Petrol pump management software 1.0 SQL Injection |
|---|
| विवरण |
The Petrol Pump Management Software from SOURCECODESTER is vulnerable to an Unauthenticated SQL Injection via its /admin/edit_categories.php page. This flaw stems from improper sanitization of the id parameter in an SQL query. Attackers can exploit this by injecting a malicious UNION SELECT statement through the id parameter in a POST request, as demonstrated, to execute arbitrary SQL commands. This vulnerability exposes the system to potential unauthorized data access, manipulation, or even database compromise, underscoring the critical need for rigorous input validation and the use of prepared statements to ensure data integrity and security. |
|---|
| स्रोत | ⚠️ https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Petrol%20pump%20management%20software/edit_categories.php%20SQL%20Injection.md |
|---|
| उपयोगकर्ता | nochizplz (UID 64302) |
|---|
| सबमिशन | 29/02/2024 06:55 AM (3 साल पहले) |
|---|
| संयम | 01/03/2024 07:54 AM (1 day later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 255377 [SourceCodester Petrol Pump Management Software 1.0 edit_categories.php पहचान SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|