| शीर्षक | Complaint Management System V1.0 SQL Injection |
|---|
| विवरण | A severe SQL Injection vulnerability has been identified in the /admin/state.php file of the Phpgurukul Complaint Management System v1.0. This flaw allows attackers to inject malicious SQL code through the state parameter without requiring any form of authentication, potentially leading to unauthorized data access, data manipulation, and complete system compromise.The vulnerability arises because the application directly embeds user-supplied input from the state parameter into SQL queries without implementing adequate sanitization or validation mechanisms. This oversight permits attackers to manipulate the SQL query structure by injecting malicious code, thereby executing unintended database operations. |
|---|
| स्रोत | ⚠️ https://github.com/AngrySheep2003/cve/blob/main/Complaint_Management_System_SQL_Injection.md |
|---|
| उपयोगकर्ता | angrysheep (UID 79486) |
|---|
| सबमिशन | 26/12/2024 11:21 AM (2 साल पहले) |
|---|
| संयम | 26/12/2024 06:12 PM (7 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 289353 [PHPGurukul Complaint Management System 1.0 /admin/state.php state SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|