| शीर्षक | itsourcecode Agri-Trading Online Shopping System V1.0 SQL Injection |
|---|
| विवरण | During security testing of the "Agri-Trading Online Shopping System", a critical unauthenticated SQL injection vulnerability was identified in the "/admin/suppliercontroller.php" file. This vulnerability originates from complete lack of input validation on the 'supplier' parameter. Attackers can directly inject malicious SQL queries through this parameter without requiring any authentication or valid credentials. The vulnerability poses an immediate threat to system security as it can be exploited remotely without any prior access requirements. Urgent remediation is necessary to prevent potential data breaches and system compromise. |
|---|
| स्रोत | ⚠️ https://github.com/Sp1d3rL1/CVE/issues/7 |
|---|
| उपयोगकर्ता | sp1d3r (UID 77907) |
|---|
| सबमिशन | 01/07/2025 03:22 PM (1 वर्ष पहले) |
|---|
| संयम | 07/07/2025 10:40 AM (6 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 315132 [itsourcecode Agri-Trading Online Shopping System तक 1.0 suppliercontroller.php supplier SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|