| शीर्षक | chaitak-gorai blogbook latest version as of 2025/05/22 SQL Injection |
|---|
| विवरण | A SQL injection vulnerability exists in the [post.php] file of the BlogBook application. User-supplied input from the p_id GET parameter is directly concatenated into SQL query strings without adequate sanitization. This affects both an UPDATE query designed to increment post view counts and a SELECT query used to fetch post data for display. Consequently, an unauthenticated remote attacker can inject and execute arbitrary SQL commands, potentially leading to unauthorized data access, modification, or further compromise of the database. |
|---|
| स्रोत | ⚠️ https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20post.php%20p_id%20Parameter%20SQL%20Injection.md |
|---|
| उपयोगकर्ता | bpy9ft (UID 85221) |
|---|
| सबमिशन | 22/05/2025 06:08 AM (1 वर्ष पहले) |
|---|
| संयम | 31/05/2025 06:13 PM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 310741 [chaitak-gorai Blogbook तक 92f5cf90f8a7e6566b576fe0952e14e1c6736513 GET Parameter /post.php p_id SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|