| शीर्षक | PHPGurukul User Registration & Login and User Management System 1.0 SQL Injection |
|---|
| विवरण | A Time-Based Blind SQL Injection vulnerability was identified in the User Registration & Login and User Management System (≤ v1.0) developed by PHPGurukul. The issue resides in the username POST parameter of the login functionality, where unsanitized user input is directly concatenated into a SQL query. This allows an authenticated attacker to inject malicious SQL payloads that delay the server response using SLEEP(), thereby confirming the injection and potentially extracting sensitive data from the database. |
|---|
| स्रोत | ⚠️ https://github.com/GIRISH05/SQL-User-Registration-Login/blob/main/SQL-Time-Based.md |
|---|
| उपयोगकर्ता | girishbo (UID 85185) |
|---|
| सबमिशन | 12/05/2025 09:48 PM (1 वर्ष पहले) |
|---|
| संयम | 16/05/2025 09:26 PM (4 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 242345 [PHPGurukul User Registration & Login and User Management System with Admin Panel Admin Login page SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|