| Titolo | SourceCodester Best House Rental Management System 1.0 SQL Injection |
|---|
| Descrizione | SQL Injection vulnerability was found in payment_report.php. month_of parameter is vulnerable. Via premade tools such as SQLmap or using crafted payloads, someone can dump all the database and might lead to data breach.
This has been already submitted to MITRE.org. I am submitting it here as well just in case. |
|---|
| Fonte | ⚠️ https://github.com/jadu101/CVE/blob/main/SourceCodester_House_Rental_Management_System_Sqli.md |
|---|
| Utente | jadu101 (UID 70632) |
|---|
| Sottomissione | 17/06/2024 06:27 (2 anni fa) |
|---|
| Moderazione | 17/06/2024 15:43 (9 hours later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 268794 [SourceCodester Best House Rental Management System 1.0 payment_report.php month_of iniezione SQL] |
|---|
| Punti | 19 |
|---|