| शीर्षक | code-projects LifeStyle Store 1.0 SQL Injection |
|---|
| विवरण | This vulnerability exists in the /cart_add.php file, where user-submitted id parameters are directly concatenated into a SQL query without proper escaping or parameterization. An attacker could craft malicious SQL statements and inject them via GET requests to bypass authentication, retrieve sensitive database information, or manipulate the database. |
|---|
| स्रोत | ⚠️ https://github.com/lazywack/cve/issues/2 |
|---|
| उपयोगकर्ता | XenoEcho (UID 87913) |
|---|
| सबमिशन | 29/07/2025 08:18 AM (1 वर्ष पहले) |
|---|
| संयम | 30/07/2025 10:36 AM (1 day later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 315160 [code-projects LifeStyle Store 1.0 /cart_add.php id SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|