| शीर्षक | SourceCodester AC Repair and Services System 1.0 SQL Injection |
|---|
| विवरण | A SQL Injection vulnerability has been identified in the AC Repair and Services System provided by SourceCodester. The issue resides in the Users class, specifically within the user deletion logic implemented in php-acrss/classes/Users.php at line 120.
The application constructs an SQL query by directly concatenating user-supplied input into the DELETE statement without performing any input sanitization, validation, or parameter binding. Because the $id parameter is processed without escaping or prepared statements, an attacker can inject arbitrary SQL payloads through this field. |
|---|
| स्रोत | ⚠️ https://github.com/koparmalbaris/CVEs/issues/1 |
|---|
| उपयोगकर्ता | barisk (UID 92693) |
|---|
| सबमिशन | 17/11/2025 01:14 PM (11 महीनों पहले) |
|---|
| संयम | 22/11/2025 05:50 PM (5 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 300670 [SourceCodester AC Repair and Services System 1.0 /classes/Users.php save_users/delete_users id SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|