| शीर्षक | SourceCodester Online Eyewear Shop 1.0 SQL Injection |
|---|
| विवरण | A critical SQL injection vulnerability has been identified in Online Eyewear Shop Website version 1.0. This flaw exists within the report viewing page at `/admin/?page=reports&date=2024-10-13`. By manipulating the `date` parameter, attackers can inject malicious SQL code, allowing them to retrieve sensitive data from the backend database. This vulnerability exposes the system to potential data breaches and unauthorized access. No patch or mitigation has been provided at this time, and the risk remains unaddressed.
|
|---|
| स्रोत | ⚠️ https://gist.github.com/higordiego/b9699573de61b26f2290e69f38d23fd0 |
|---|
| उपयोगकर्ता | c4ttr4ck (UID 75518) |
|---|
| सबमिशन | 13/10/2024 04:47 PM (2 साल पहले) |
|---|
| संयम | 15/10/2024 07:09 AM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 280338 [SourceCodester Online Eyewear Shop 1.0 Report Viewing Page /admin/?page=reports date SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|