| Titolo | Bus Dispatch and Information System in adminid has Sql injection vulnerabilities |
|---|
| Descrizione | Bus Dispatch and Information System has Sql injection vulnerabilities. The vulnerability is located in the adminid parameter of the view_admin.php file. The attacker can read and write arbitrarily to the database and obtain sensitive data without logging in the background.
Soucode Download: https://code-projects.org/bus-dispatch-and-information-system-in-php-with-source-code/ |
|---|
| Fonte | ⚠️ https://gitee.com/zyz0103/system-vul/blob/master/Bus%20Dispatch%20and%20Information%20System%20in%20adminid%20has%20Sql%20injection%20vulnerabilities.pdf |
|---|
| Utente | zyz1 (UID 46928) |
|---|
| Sottomissione | 17/05/2023 07:36 (3 anni fa) |
|---|
| Moderazione | 17/05/2023 18:58 (11 hours later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 229279 [code-projects Bus Dispatch and Information System 1.0 view_admin.php adminid iniezione SQL] |
|---|
| Punti | 20 |
|---|