| शीर्षक | GitHub Grocery List Management Web App 1.0 SQL Injection |
|---|
| विवरण | SQL Injection is a vulnerability that occurs when user-supplied input is improperly validated and directly concatenated into SQL queries. An attacker can manipulate the input to alter the structure of the query, leading to unauthorized access or modification of database contents.
In the affected application, the id parameter of update.php is directly embedded in the SQL query without proper sanitization or the use of prepared statements. This allows an attacker to inject malicious SQL payloads and potentially:
Retrieve sensitive information such as usernames and passwords
Modify or delete database records
Enumerate database structure and version
Escalate the attack to gain full control of the backend database |
|---|
| स्रोत | ⚠️ https://gist.github.com/0xSebin/a163239e0132d7d58ef1300f321da819 |
|---|
| उपयोगकर्ता | 0xSebin (UID 35195) |
|---|
| सबमिशन | 23/08/2025 10:02 AM (1 वर्ष पहले) |
|---|
| संयम | 31/08/2025 10:12 AM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 322050 [HKritesh009 Grocery List Management Web App तक f491b681eb70d465f445c9a721415c965190f83b /src/update.php id SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|