| शीर्षक | itsourcecode Company The billing system 1.0 SQL Injection |
|---|
| विवरण | There is a serious SQL injection vulnerability in the login verification logic of the Billing System project. The vulnerability lies in the code in the process.php file that handles user login requests. Specifically, the SQL query statement in line 7 directly splices the username and password parameters submitted by the user through the POST request into the SQL query string without any effective input validation, filtering or parameterization. This insecure approach allows attackers to change the logic of the original SQL query by constructing malicious input, thereby bypassing the authentication mechanism. |
|---|
| स्रोत | ⚠️ https://www.yuque.com/yuqueyonghuexlgkz/zepczx/py9oh6m1p7mx4eqr?singleDoc# 《The billing system has a foreground sql injection vulnerability》 |
|---|
| उपयोगकर्ता | liule960117 (UID 88729) |
|---|
| सबमिशन | 20/10/2025 07:12 PM (12 महीनों पहले) |
|---|
| संयम | 02/11/2025 02:19 PM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 330911 [itsourcecode Billing System 1.0 login_crud.php password SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|