| शीर्षक | Github Core PHP Admin panel v1.0 SQL Injection |
|---|
| विवरण | The finding was validated through automated testing with sqlmap in the local environment. sqlmap successfully identified the vulnerable parameter, confirmed injectable payload classes, and produced usable confirmation output such as DBMS identification, database enumeration, table enumeration, or dump artifacts.
## Vulnerable Location
- **Affected File**: /Applications/MAMP/htdocs/core-php-admin-panel-master/customers.php (line 44)
- **Vulnerable Parameter**: `filter_col`
## Vulnerability Overview
The Core PHP Admin panel application does not properly validate or sanitize user input for the filter_col parameter. This results in a confirmed SQL Injection vulnerability. An authenticated remote attacker can construct and execute malicious SQL statements through the affected endpoint and backend SQL sink. |
|---|
| स्रोत | ⚠️ https://github.com/miku01leon/CVE/issues/4 |
|---|
| उपयोगकर्ता | Xinyang Li (UID 97397) |
|---|
| सबमिशन | 11/06/2026 07:09 PM (2 महीनों पहले) |
|---|
| संयम | 04/08/2026 09:14 AM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 385775 [chetans9 core-php-admin-panel तक 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f customers.php filter_col SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|