जमा करें #501070: code-projects Real Estate Property Management System in php 0/1 SQL Injectionजानकारी

शीर्षकcode-projects Real Estate Property Management System in php 0/1 SQL Injection
विवरणAn unrestricted SQL injection attack exists in an Real Estate Property Management System in Admin/CustomerReport.php. The parameters that can be controlled are as follows: $cityparameter . This function executes the id parameter into the SOL statement without anyrestrictions, A malicious attacker could exploit this vulnerability to obtain sensitive information inthe server database.
स्रोत⚠️ https://github.com/1337g/realestatepropertymanagement_poc/blob/main/gu3.pdf
उपयोगकर्ता
 JunFeiGu (UID 81236)
सबमिशन14/02/2025 01:33 PM (2 साल पहले)
संयम16/02/2025 09:09 PM (2 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि295987 [code-projects Real Estate Property Management System 1.0 CustomerReport.php city SQL इंजेक्शन]
अंक20

Do you want to use VulDB in your project?

Use the official API to access entries easily!