| शीर्षक | code-projects Pharmacy Management System 1.0 SQL Injection |
|---|
| विवरण | A critical SQL injection vulnerability has been discovered in the Pharmacy Management System version 1.0, specifically in the add supplier functionality. This flaw occurs when user inputs, such as the name parameter, are not properly sanitized. Attackers can manipulate these inputs to inject and execute arbitrary SQL commands through a GET request to the endpoint /php/add_new_supplier.php.
If exploited, this vulnerability may allow unauthorized access to sensitive data, including supplier details, and disrupt operations. Given the absence of a patch, the issue represents a severe risk, demanding immediate remediation to prevent database compromise and information leakage. |
|---|
| स्रोत | ⚠️ https://gist.github.com/higordiego/155be99b5314d97b276a7b30b9e6dec0 |
|---|
| उपयोगकर्ता | c4ttr4ck (UID 75518) |
|---|
| सबमिशन | 16/10/2024 11:37 PM (2 साल पहले) |
|---|
| संयम | 18/10/2024 06:21 PM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 280927 [code-projects Pharmacy Management System 1.0 /add_new_supplier.php name SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|