| शीर्षक | jkev Personnel Record Management System V1.0 SQL Injection |
|---|
| विवरण | The system fails to sanitize or filter user input during authentication, data querying, and data entry processes, resulting in multiple SQL injection vulnerabilities. Attackers can exploit these flaws to bypass authentication, take over arbitrary accounts, steal plaintext passwords, and gain unauthorized access to the administrator dashboard. Once inside, they can view and modify any stored information, leading to severe sensitive data disclosure and system compromise.
|
|---|
| स्रोत | ⚠️ https://github.com/whatyourname12345/CVE/blob/main/PRMS/cve_SQL.md |
|---|
| उपयोगकर्ता | chenkh (UID 96588) |
|---|
| सबमिशन | 20/03/2026 02:59 AM (7 महीनों पहले) |
|---|
| संयम | 04/04/2026 04:45 PM (16 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 355345 [SourceCodester/jkev Record Management System 1.0 Login index.php UserName SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|