| शीर्षक | SourceCodester E-Commerce Website 1.0 SQL Injection |
|---|
| विवरण | Title: SQL Injection Vulnerability in /Admin/registration.php Endpoint
Summary: A SQL injection vulnerability has been discovered in thehttps://www.sourcecodester.com/php/14211/online-art-gallery-management-system-project-using-phpmysql.html (/Admin/registration.php) endpoint of a web application. The vulnerability exists in the username field, where user input is not properly sanitized, allowing an attacker to inject malicious SQL queries. This can lead to unauthorized access, database extraction, or other malicious actions, depending on the exploitation method used.
Vulnerable Endpoint: /Admin/registration.php
Vulnerable parameter: fname
Vulnerable Field: Username field
detailed POC in advisory |
|---|
| स्रोत | ⚠️ https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Online-Art-Gallary-Management-System-onlinadvisory-sqli.md |
|---|
| उपयोगकर्ता | guru (UID 74056) |
|---|
| सबमिशन | 26/08/2024 01:48 PM (2 साल पहले) |
|---|
| संयम | 27/08/2024 02:34 PM (1 day later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 275926 [SourceCodester E-Commerce Website 1.0 /Admin/registration.php fname SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|