| शीर्षक | Itsourcecode Itsourcecode Online File Management System V1.0 SQL Injection |
|---|
| विवरण | A critical SQL injection vulnerability exists in the /admin_class.php file of the Online File Management System. The application fails to properly sanitize user input before incorporating it into SQL queries, specifically during the authentication process.
An attacker can exploit this vulnerability by injecting malicious SQL code through the username field, allowing them to bypass authentication mechanisms and potentially gain unauthorized access to the entire database.
|
|---|
| स्रोत | ⚠️ https://github.com/jaisurya-me/CVE/issues/1 |
|---|
| उपयोगकर्ता | Jaisuryavel (UID 92667) |
|---|
| सबमिशन | 16/11/2025 08:22 PM (11 महीनों पहले) |
|---|
| संयम | 20/11/2025 06:05 PM (4 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 333085 [itsourcecode Online File Management System 1.0 /ajax.php?action=login username SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|