| शीर्षक | MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 SQL Injection |
|---|
| विवरण | The Online College Event Hall Reservation System demonstrates a SQL Injection vulnerability within its `/admin/users.php` component, specifically through the `user_id` parameter. This flaw allows attackers to execute arbitrary SQL commands, such as delaying the server response using the `sleep(5)` function. This vulnerability underlines the importance of employing parameterized queries or proper input validation techniques to protect the application from SQL Injection attacks, thereby safeguarding the database from unauthorized access or manipulation. |
|---|
| स्रोत | ⚠️ https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/SQL%20Injection%20-%20users.php.md |
|---|
| उपयोगकर्ता | nochizplz (UID 64302) |
|---|
| सबमिशन | 08/03/2024 12:18 PM (3 साल पहले) |
|---|
| संयम | 15/03/2024 05:29 PM (7 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 256971 [MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 /admin/users.php user_id SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|