| शीर्षक | College-Notes-Gallery v1.0.0 SQL Injection leading to Authentication Bypass Vulnerability |
|---|
| विवरण | anirbandutta9/College-Notes-Gallery has a SQL Injection leading to Authentication Bypass Vulnerability. During the security review of "College-Notes-Gallery", I found a key SQL injection vulnerability in the "login.php" file. This vulnerability stems from insufficient user input verification of "user" and "pass" parameters, allowing attackers to inject malicious SQL queries. Therefore, attackers can access the database without authorization, modify or delete data, and access sensitive information. Remedial measures need to be taken immediately to ensure system security and protect data integrity. |
|---|
| स्रोत | ⚠️ https://github.com/yingxiujie/cve/issues/9 |
|---|
| उपयोगकर्ता | yingxiujie (UID 96521) |
|---|
| सबमिशन | 20/07/2026 10:38 AM (2 महीनों पहले) |
|---|
| संयम | 22/09/2026 06:11 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 408519 [anirbandutta9 College-Notes-Gallery तक 8c1cf3d98f30982d069c88ca172612c001eb39f6 login.php user/pass SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|