| शीर्षक | SourceCodester Resort Reservation System (PHP + SQLite3) 1.0 SQL Injection |
|---|
| विवरण | The manage_user.php component of the application is vulnerable to SQL Injection due to improper handling of user-supplied input in the id parameter. The application directly concatenates the parameter into an SQL query without sanitization or parameter binding. This allows authenticated attackers to manipulate queries and retrieve arbitrary data from the backend database. |
|---|
| स्रोत | ⚠️ https://medium.com/@cybertamarin/sql-injection-in-php-reservation-system-breaking-access-control-via-a-single-parameter-46dcd6a8a8e9 |
|---|
| उपयोगकर्ता | Antony Esthak Twinson (UID 96471) |
|---|
| सबमिशन | 27/03/2026 03:49 PM (6 महीनों पहले) |
|---|
| संयम | 08/04/2026 09:14 PM (12 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 236235 [SourceCodester Resort Reservation System 1.0 manage_user.php id SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|