| शीर्षक | itsourcecode Employee Management System V1.0 SQL Injection |
|---|
| विवरण | During a security inspection of the 'Employee Record Management System', a very serious SQL injection vulnerability was found in the 'adminprofile.php' file located in the 'admin' folder. This vulnerability originates from insufficient validation of user input for the login parameters and the use of plaintext transmission, allowing direct access with the 'SQL universal password' (username: 1' or 1=1# password: 1' or 1=1#). After logging in, an attacker can inject malicious SQL queries through these parameters. Immediate remedial measures are needed to ensure system security and protect data integrity. |
|---|
| स्रोत | ⚠️ https://github.com/chesser12312310/CVE/issues/3 |
|---|
| उपयोगकर्ता | chessplayer (UID 88880) |
|---|
| सबमिशन | 03/09/2025 03:20 PM (11 महीनों पहले) |
|---|
| संयम | 13/09/2025 09:58 PM (10 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 315038 [itsourcecode Employee Management System तक 1.0 /admin/adminprofile.php AdminName SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|