| शीर्षक | code-projects Web-Based Inventory and POS System 1.0 SQL Injection |
|---|
| विवरण | SQL injection allows attackers to read, modify or delete sensitive data, bypass authentication, execute system commands and cause data breaches that result in legal and financial damage.
In the transaction.php file of pos-system, the shopid parameters are obtained, and the SQL statement is concatenated to the SQL statement without filtering the execution, resulting in SQL injection vulnerabilities and server permissions |
|---|
| स्रोत | ⚠️ https://github.com/asd1238525/cve/blob/main/SQL7.md |
|---|
| उपयोगकर्ता | LT202108729 (UID 90406) |
|---|
| सबमिशन | 01/10/2025 10:17 AM (1 वर्ष पहले) |
|---|
| संयम | 07/10/2025 02:57 PM (6 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 327368 [code-projects Web-Based Inventory and POS System 1.0 /transaction.php shopid SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|