| शीर्षक | SourceCodester Best courier management system project in php V1.0 Unrestricted Upload |
|---|
| विवरण | The PHP method uses methods located in view_parcel The $_Variable element on line 5 of the PHP file receives and dynamically executes user controlled code. This allows attackers to cause SQL injection attacks.
zebra11 has discovered that due to insufficient protection of the "id" parameter in the "\view_parcel.php" file, "Best courier management system project in php" there is a serious security vulnerability in the This vulnerability may be used to inject malicious SQL queries, resulting in unauthorized access and extraction of sensitive information from the database. |
|---|
| स्रोत | ⚠️ https://github.com/CveSecLook/cve/issues/28 |
|---|
| उपयोगकर्ता | zebra11 (UID 68838) |
|---|
| सबमिशन | 14/05/2024 05:07 PM (2 साल पहले) |
|---|
| संयम | 15/05/2024 05:04 PM (24 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 264480 [SourceCodester Best Courier Management System 1.0 view_parcel.php id अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|