| शीर्षक | SourceCodester Sourcecodester Car Driving School Management System 1.0 SQL injection |
|---|
| विवरण | After receiving the id parameter passed in through the get method in the Master.php file, it is directly spliced into the SQL query statement for execution without any security filtering. An attacker can use this parameter to perform SQL injection to read arbitrary database information. |
|---|
| स्रोत | ⚠️ https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-7.md |
|---|
| उपयोगकर्ता | BFS-Lab (UID 73306) |
|---|
| सबमिशन | 10/08/2024 06:27 AM (2 साल पहले) |
|---|
| संयम | 10/08/2024 10:19 AM (4 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 274127 [SourceCodester Car Driving School Management System 1.0 Master.php delete_enrollment id SQL इंजेक्शन] |
|---|
| अंक | 17 |
|---|