| शीर्षक | Realce Tecnologia Queue ticket kiosk web application N/A SQL Injection |
|---|
| विवरण | Title: Realce Tecnologia queue ticket kiosk login web page vulnerable to SQL Injection
Software affected: Realce tecnologia web application in queue ticket kiosk (There is no version in the application pages)
Vendor: Realce Tecnologia - https://www.realcetecnologia.com.br/
Description:
The login page of the queue ticket kiosk's web application is vulnerable to SQL Injection. The input field for the username does not properly sanitize or parameterize user input, allowing direct manipulation of SQL queries.
Technical Details:
An attacker can inject malicious SQL code into the username field to access data.
Impact:
An attacker can gain unauthorized access, extract sensitive data from the database, or modify stored information, depending on the database permissions associated with the application.
The exploitation evidences will be sent by e-mail. |
|---|
| उपयोगकर्ता | Anonymous User |
|---|
| सबमिशन | 17/05/2025 04:36 PM (1 वर्ष पहले) |
|---|
| संयम | 25/05/2025 07:14 PM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 310264 [Realce Tecnologia Queue Ticket Kiosk तक 20250517 Admin Login Page /adm/index.php Usuário SQL इंजेक्शन] |
|---|
| अंक | 17 |
|---|