| शीर्षक | code-projects Simple Stock System In PHP 1.0 SQL Injection |
|---|
| विवरण | A SQL injection vulnerability exists in the Simple Stock System In PHP within the /market/checkuser.php file, where the username GET parameter is directly concatenated into a SELECT SQL query without proper validation or parameterization, allowing attackers to inject malicious SQL statements through crafted HTTP requests and potentially extract sensitive user data, manipulate database queries, or compromise the authentication mechanism of the stock management system. |
|---|
| स्रोत | ⚠️ https://gist.github.com/b1uel0n3/06593fd15acd0f2f61c29c5595453755 |
|---|
| उपयोगकर्ता | b1uel0n3 (UID 93016) |
|---|
| सबमिशन | 14/12/2025 01:03 PM (10 महीनों पहले) |
|---|
| संयम | 17/12/2025 03:56 PM (3 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 336983 [code-projects Simple Stock System 1.0 /checkuser.php username SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|