| शीर्षक | code-projects Pharmacy Management System 1.0 SQL Injection |
|---|
| विवरण | A critical SQL injection vulnerability has been identified in the **Pharmacy Management System** version 1.0, specifically in the **supplier deletion functionality**. The flaw occurs because the `id` parameter is not properly sanitized when passed via a **GET** request to the endpoint `/php/manage_supplier.php`. Attackers can exploit this by injecting arbitrary SQL commands, compromising the database's integrity and exposing sensitive information.
If successfully exploited, this vulnerability allows unauthorized deletion of supplier records, exposure of confidential data, and disruption of key operations. Since no patch is available, the risk is severe, requiring urgent mitigation to prevent data breaches and operational failures. |
|---|
| स्रोत | ⚠️ https://gist.github.com/higordiego/b03bc3a330374a0581e51891d6105ed2 |
|---|
| उपयोगकर्ता | c4ttr4ck (UID 75518) |
|---|
| सबमिशन | 17/10/2024 02:28 AM (2 साल पहले) |
|---|
| संयम | 18/10/2024 06:21 PM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 280928 [code-projects Pharmacy Management System 1.0 /manage_supplier.php id SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|