| शीर्षक | itsourcecode Tailoring Management System 1.0 SQL Injection |
|---|
| विवरण | A GET SQL injection vulnerability was found in multiple PHP files in the Tailoring Management System Project In PHP with Source Code project. The reason for this issue is that an attacker injects malicious code from the parameter "id" or "expid" or "incid" or "typeid" or "staffid" and uses it directly in SQL queries without proper sanitization or validation. This allows an attacker to forge input values to manipulate SQL queries and perform unauthorized actions.
|
|---|
| स्रोत | ⚠️ https://github.com/magic2353112890/cve/issues/7 |
|---|
| उपयोगकर्ता | lyp123 (UID 80136) |
|---|
| सबमिशन | 24/01/2025 07:10 AM (2 साल पहले) |
|---|
| संयम | 31/01/2025 08:27 PM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 294298 [itsourcecode Tailoring Management System 1.0 deldoc.php id SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|