| शीर्षक | Sourcecodester Online Clothing Store 1.0 SQL Injection |
|---|
| विवरण | A SQL Injection vulnerability has been identified in Sourcecodester Online Clothing Store 1.0. The vulnerability affects the authentication functionality implemented in /index.php. Insufficient sanitization of user-supplied input in the username parameter allows manipulation of backend SQL queries. Successful exploitation may result in authentication bypass and unauthorized administrative access without valid credentials. An attacker can leverage this issue to gain elevated privileges and perform unauthorized actions within the administrative interface, potentially compromising the confidentiality and integrity of the application. |
|---|
| स्रोत | ⚠️ https://medium.com/@hemantrajbhati5555/sql-injection-leading-to-administrator-authentication-bypass-f82de3a370a6 |
|---|
| उपयोगकर्ता | Hemant Raj Bhati (UID 95613) |
|---|
| सबमिशन | 11/06/2026 08:23 PM (4 महीनों पहले) |
|---|
| संयम | 14/07/2026 12:46 PM (1 month later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 165082 [SourceCodester/code-projects Online Clothing Store 1.0 login.php txtUserName SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|