| शीर्षक | GitHub advocate-office-management-system V 1.0 SQL Injection |
|---|
| विवरण | The id parameter under the control/activate_reg.php file of the advertisement office management system is controllable by the user. This parameter does not carry out any filtering. An attacker can execute malicious sql injection by constructing malicious sql statements, thus creating an sql injection vulnerability. Through this vulnerability, sensitive information can be obtained, or malicious files can be written, and finally server permissions can be obtained |
|---|
| स्रोत | ⚠️ https://github.com/zhangbeihai-1/cve/issues/1 |
|---|
| उपयोगकर्ता | dead_end (UID 96372) |
|---|
| सबमिशन | 12/03/2026 11:03 AM (4 महीनों पहले) |
|---|
| संयम | 27/03/2026 05:07 PM (15 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 300585 [SourceCodester Kortex Lite Advocate Office Management System 1.0 activate_reg.php पहचान SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|