| शीर्षक | code-projects Pharmacy Management System 1.0 SQL Injection |
|---|
| विवरण | A critical SQL injection vulnerability has been discovered in the **Pharmacy Management System** version 1.0, specifically in the **medicine management deletion functionality**. This flaw occurs when the `id` parameter, used to delete a medicine entry, is not properly sanitized. By manipulating this parameter through a **GET** request, attackers can inject and execute arbitrary SQL commands, compromising the security and integrity of the database.
If exploited, this vulnerability may allow unauthorized deletion of critical records, exposure of sensitive data, and disruption of essential operations. As no patch is available, this issue presents a severe risk and requires immediate action to prevent database corruption and system misuse. |
|---|
| स्रोत | ⚠️ https://gist.github.com/higordiego/edd15afd508c51c95e5ce29544165320 |
|---|
| उपयोगकर्ता | c4ttr4ck (UID 75518) |
|---|
| सबमिशन | 16/10/2024 11:34 PM (2 साल पहले) |
|---|
| संयम | 18/10/2024 06:21 PM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 280925 [code-projects Pharmacy Management System 1.0 manage_medicine.php?action=delete पहचान SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|