| शीर्षक | SourceCodester Best House Rental Management System 1.0 SQL injection |
|---|
| विवरण | After receiving the id parameter passed in through the get method in the manage_payment.php file, it is directly spliced into the SQL query statement for execution without any security filtering. An attacker can use this parameter to perform SQL injection to read arbitrary database information. |
|---|
| स्रोत | ⚠️ https://github.com/rockersiyuan/CVE/blob/main/SourceCodester_House_Rental_Management_System_Sql_Inject-3.md |
|---|
| उपयोगकर्ता | rocker (UID 62454) |
|---|
| सबमिशन | 23/05/2024 04:07 PM (2 साल पहले) |
|---|
| संयम | 25/05/2024 08:11 AM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 266277 [SourceCodester Best House Rental Management System तक 1.0 manage_payment.php id SQL इंजेक्शन] |
|---|
| अंक | 18 |
|---|