| शीर्षक | phpok3w 1.0 SQL Injection |
|---|
| विवरण | The article display function on the phpok3w front-end contains an SQL injection vulnerability. The application directly concatenates user-supplied GET parameters into SQL queries without proper validation or sanitization. An unauthenticated attacker can inject malicious input to tamper with the SQL query structure, leading to unexpected database query execution. This vulnerability allows attackers to modify SQL logic and potentially execute UNION-based queries to access sensitive database information. |
|---|
| स्रोत | ⚠️ https://gitee.com/9786/phpok3w/issues/IDD1IZ |
|---|
| उपयोगकर्ता | formanagain (UID 93347) |
|---|
| सबमिशन | 15/12/2025 07:54 AM (10 महीनों पहले) |
|---|
| संयम | 27/12/2025 11:21 AM (12 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 338520 [9786 phpok3w तक 901d96a06809fb28b17f3a4362c59e70411c933c show.php id SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|