| शीर्षक | code-projects Client Details System V1.0 SQL Injection |
|---|
| विवरण | A critical SQL Injection vulnerability exists in clientdetails/update-clients.php via the uid GET parameter. The application embeds uid unescaped into the backend SQL, enabling attackers to alter query logic and inject additional statements. Because input is not sanitized and prepared statements are not used, the endpoint is susceptible to multiple exploitation techniques. |
|---|
| स्रोत | ⚠️ https://github.com/hellonewbie/tutorial/issues/3 |
|---|
| उपयोगकर्ता | ZengY (UID 91559) |
|---|
| सबमिशन | 12/10/2025 10:06 AM (12 महीनों पहले) |
|---|
| संयम | 26/10/2025 05:57 AM (14 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 249144 [code-projects Client Details System 1.0 update-clients.php uid SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|