जमा करें #402425: SourceCodester Clinics Patient Management System 2.0 SQL Injection
| शीर्षक | SourceCodester Clinics Patient Management System 2.0 SQL Injection |
|---|---|
| विवरण | A Unauthenticated SQL injection vulnerability was identified in SourceCodesters Clinic's Patient Management System - PHP allow full database access this vulnerability lies in the the print_diseases.php which use some paramter **disease/from/to** all this GET paramter is vulnerable with SQL injection any malicious threat actor can directly exploit this vulnerablity without any authentication which lead database access Affected Project: Sourcecodester Clinic's Patient Management System - PHP 2.0 Official Website: Sourcecodester Clinic's Patient Management System Version: 2.0 vulnerable code: /print_diseases.php POC: `sqlmap -u "http://192.168.95.115/print_diseases.php?from=1&to=1&disease=1" --batch` |
| स्रोत | ⚠️ https:/ |
| उपयोगकर्ता | guru (UID 74056) |
| सबमिशन | 04/09/2024 01:46 PM (2 साल पहले) |
| संयम | 07/09/2024 07:58 AM (3 days later) |
| स्थिति | स्वीकृत |
| VulDB प्रविष्टि | 276785 [SourceCodesters Clinics Patient Management System 2.0 /print_diseases.php disease/from/to SQL इंजेक्शन] |
| अंक | 20 |