| शीर्षक | SourceCodester Best courier management system project in php V1.0 SQL Injection |
|---|
| विवरण | In the "edit_staff.php" file, use $_GET on the third line to obtain the parameter ID and dynamically execute the user controlled code. This allows attackers to trigger SQL injection attacks
ZhaoBin Huang has discovered that due to insufficient protection of the "id" parameter in the "\edit_staff.php" file, "Best courier management system project in php" there is a serious security vulnerability in the This vulnerability may be used to inject malicious SQL queries, resulting in unauthorized access and extraction of sensitive information from the database. |
|---|
| स्रोत | ⚠️ https://github.com/CveSecLook/cve/issues/33 |
|---|
| उपयोगकर्ता | ZhaoBin Huang (UID 69070) |
|---|
| सबमिशन | 17/05/2024 06:45 PM (2 साल पहले) |
|---|
| संयम | 18/05/2024 04:36 PM (22 hours later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 242863 [SourceCodester Best Courier Management System 1.0 /edit_staff.php id SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|