| शीर्षक | SourceCodester Guest Management System in PHP with Full Source Code V1.0 Unrestricted Upload |
|---|
| विवरण | Hefei Coffee has discovered that due to insufficient protection of the "pass" parameter in the "img/user page. PHP" file, "Guest Management System in PHP with Full Source Code" there is a serious security vulnerability in the This vulnerability may be used to inject malicious SQL queries, resulting in unauthorized access and extraction of sensitive information from the database.
The include method in the 16th line of the img\user page.php file retrieves user input from the POST element. Then, the value of this element will be passed to the code without proper purification or validation, and ultimately used for database queries in the include method on line 21 of the img\user page.php file. This may lead to SQL injection attacks. |
|---|
| स्रोत | ⚠️ https://github.com/Hefei-Coffee/cve/issues/1 |
|---|
| उपयोगकर्ता | Hefei-Coffee (UID 68557) |
|---|
| सबमिशन | 07/05/2024 07:10 PM (2 साल पहले) |
|---|
| संयम | 08/05/2024 09:07 AM (14 hours later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 206398 [SourceCodester Guest Management System index.php username/pass SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|