| शीर्षक | SOURCECODESTER Employee Task Management System 1.0 SQL Injection |
|---|
| विवरण | The Employee Task Management System exhibits an SQL Injection vulnerability within its `/task-details.php` page. By manipulating the `task_id` parameter, attackers can execute arbitrary SQL queries, as demonstrated by injecting a `union select` statement to extract sensitive database information like the database name, version, and user. This flaw underscores the critical importance of using parameterized queries or prepared statements to prevent SQL Injection, safeguarding the database against unauthorized access and data breaches. |
|---|
| स्रोत | ⚠️ https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Employee%20Task%20Management%20System/SQL%20Injection%20-%20task-details.php.md |
|---|
| उपयोगकर्ता | nochizplz (UID 64302) |
|---|
| सबमिशन | 16/03/2024 06:11 PM (3 साल पहले) |
|---|
| संयम | 17/03/2024 09:11 AM (15 hours later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 221453 [SourceCodester Employee Task Management System 1.0 task-details.php task_id SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|