| शीर्षक | onetwothreeneth HospitalManagementSystem 9ef91ed6007314b6473110ed699dff76d158f61d SQL Injection |
|---|
| विवरण | Affected: `edit_accounts.php` (line 12 and following), `edit_patient.php`, `edit_physicians.php`, `edit_discounts.php`, `edit_services.php` - the `GET` id parameters `user_id`, `patient_id`, `physician_id`, `discounts_id`, `services_id` are each concatenated raw into the `get("col","$s tablename $w idcol='$_GET[id]'")` calls that prefill the edit forms. Reachable unauthenticated. Exploitation: time-based payload `<id>' AND SLEEP(1)-- -` delays every page by the number of queries per page (4s/7s/3s/2s/6s measured), proving a blind SQL injection on each of the five endpoints. Data of any table (including the plaintext `users` table) can be extracted blind. |
|---|
| स्रोत | ⚠️ https://github.com/onetwothreeneth/HospitalManagementSystem/issues/4 |
|---|
| उपयोगकर्ता | David_ (UID 101036) |
|---|
| सबमिशन | 06/09/2026 04:30 PM (27 दिन पहले) |
|---|
| संयम | 02/10/2026 05:45 AM (26 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 412916 [onetwothreeneth HospitalManagementSystem तक 9ef91ed6007314b6473110ed699dff76d158f61d edit_accounts.php get SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|