| शीर्षक | sfturing hosporder v1.0 SQL Injection |
|---|
| विवरण | There is an sql injection vulnerability in the front desk, and attackers can execute sql statements without authorization. SQL injection vulnerabilities should be classified as extremely dangerous vulnerabilities. Attackers can perform operations such as querying and tampering with the database through SQL injection vulnerabilities, and even clear the entire database. On the system side, attackers can also execute system commands by combining SQL injection vulnerabilities with database extensions, and carry out dangerous operations such as implanting system backdoors through backup functions. |
|---|
| स्रोत | ⚠️ https://github.com/sfturing/hosp_order/issues/109 |
|---|
| उपयोगकर्ता | bi8bu (UID 84151) |
|---|
| सबमिशन | 19/06/2025 10:48 AM (1 वर्ष पहले) |
|---|
| संयम | 27/06/2025 08:02 AM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 314081 [sfturing hosp_order तक 627f426331da8086ce8fff2017d65b1ddef384f8 DoctorServiceImpl.java findDoctorByCondition hospitalName SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|