| शीर्षक | Codezips Blood Bank Management System In PHP With Source Code V1.0 SQL Injection |
|---|
| विवरण | Root Cause
Description:
The /campaign.php script directly incorporates user input from the cname parameter into SQL queries without proper sanitization or validation. This oversight allows attackers to inject malicious SQL code, enabling unauthorized database manipulations.
???? Impact
Unauthorized Database Access: Potential to read sensitive data.
Data Leakage: Exposure of confidential information.
Data Tampering: Ability to modify or delete records.
System Control: Possibility of full system compromise.
Service Interruption: Disruption of normal operations.
|
|---|
| स्रोत | ⚠️ https://github.com/isRainy/VULDB/blob/main/Blood_Bank_Management_System.md |
|---|
| उपयोगकर्ता | 1905589289 (UID 79521) |
|---|
| सबमिशन | 28/12/2024 11:54 AM (2 साल पहले) |
|---|
| संयम | 28/12/2024 08:18 PM (8 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 289715 [Codezips Blood Bank Management System 1.0 /campaign.php cname SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|