| Titolo | SourceCodester Event Registration System 1.0 SQL Injection |
|---|
| Descrizione | Event Registration System allows SQL Injection via the 'last_id' & 'event_id' parameters at "http://localhost/event/classes/Master.php?f=load_registration". Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit the latest vulnerabilities in the underlying database. |
|---|
| Fonte | ⚠️ https://github.com/BurakSevben/CVEs/blob/main/Event%20Registration%20System/Event%20Registration%20System%20-%20SQL%20Injection%20-%202.md |
|---|
| Utente | Burak (UID 65788) |
|---|
| Sottomissione | 18/05/2024 23:07 (2 anni fa) |
|---|
| Moderazione | 19/05/2024 13:34 (14 hours later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 265199 [SourceCodester Event Registration System 1.0 Master.php?f=load_registration last_id/event_id iniezione SQL] |
|---|
| Punti | 19 |
|---|