| शीर्षक | Labvantage LIMS 2017 SQL Injection |
|---|
| विवरण | Issue Overview:
* Vendor: Labvantage
* Product: Labvantage LIMS
* Endpoint: /labvantage/rc?command=page&page=SampleList&_iframename=list
* Vulnerable Parameter: param1
* Type of Vulnerability: SQL Injection
Description of the Vulnerability
During penetration testing, an SQL injection vulnerability was discovered in the param1 parameter of the POST request to the specified endpoint. This vulnerability allows an attacker to manipulate the SQL query by injecting arbitrary SQL code. |
|---|
| स्रोत | ⚠️ https://gentle-khaan-c53.notion.site/Labvantage-LIMS-3bb2137a29944e7e9efc906f23b42a4a |
|---|
| उपयोगकर्ता | Farouk (UID 69824) |
|---|
| सबमिशन | 30/05/2024 09:24 PM (2 साल पहले) |
|---|
| संयम | 08/06/2024 09:38 AM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 267454 [LabVantage LIMS 2017 POST Request rc?command=page&page=SampleList&_iframename=list param1 SQL इंजेक्शन] |
|---|
| अंक | 17 |
|---|