| शीर्षक | code-projects Blood Bank Management System 1.0 SQL Injection |
|---|
| विवरण | A SQL Injection vulnerability was identified in the infoAdd functionality of the BloodBank Management System version 1.0. This vulnerability occurs during the creation of blood-related information, specifically when user inputs are not sanitized before being used in SQL queries.
The PoC shows that malicious SQL commands can be injected into the request body through parameters such as bg (blood group). This allows attackers to manipulate the backend query logic to extract or modify data. Using blind logical injection techniques, the attack ensures successful exploitation by validating the logic embedded within the SQL query. |
|---|
| स्रोत | ⚠️ https://gist.github.com/higordiego/25a103a1fe84c4db4530e68d2f998d11 |
|---|
| उपयोगकर्ता | c4ttr4ck (UID 75518) |
|---|
| सबमिशन | 25/10/2024 11:15 PM (2 साल पहले) |
|---|
| संयम | 26/10/2024 03:44 PM (16 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 281959 [code-projects Blood Bank Management System 1.0 /file/infoAdd.php bg SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|