| शीर्षक | code-projects Online Job Search Engine 1.0 SQL Injection |
|---|
| विवरण | A SQL Injection vulnerability exists in the username parameter of the login form in the Online Job Search Engine application. The application fails to properly sanitize user input when constructing SQL queries. Attackers can manipulate the SQL query to execute arbitrary SQL commands, including time-based payloads for testing blind SQL injection.
The vulnerability exists because the application uses the outdated mysql_* PHP functions and relies solely on mysql_real_escape_string for input sanitization, which is insufficient to prevent SQL Injection in certain cases. |
|---|
| स्रोत | ⚠️ https://github.com/lakshayyverma/CVE-Discovery/blob/main/Online%20Job%20Search%20Engine.md |
|---|
| उपयोगकर्ता | lakshay12311 (UID 91298) |
|---|
| सबमिशन | 24/10/2025 01:02 PM (12 महीनों पहले) |
|---|
| संयम | 09/11/2025 01:48 PM (16 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 331648 [code-projects Online Job Search Engine 1.0 /login.php username/phone SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|