| Titolo | SourceCodester Food Ordering Management System 1.0 SQL Injection |
|---|
| Descrizione | SQL Injection vulnerability was discovered from SQL Injection vulnerability was discovered from Sourcecodester Food Ordering Management System 1.0.
view-ticket-admin.php has a vulnerable parameter 'id' which allows boolean-based sql injection. Either through crafted payload or premade tool such as sqlmap, this vulnerability can be recreated easily. This SQL injection leads to completely data breach for all the database on the system. |
|---|
| Fonte | ⚠️ https://github.com/jadu101/CVE/blob/main/SourceCodester_Food_Ordering_Management_System_view_ticket_admin_Sqli.md |
|---|
| Utente | jadu101 (UID 70632) |
|---|
| Sottomissione | 19/06/2024 08:29 (2 anni fa) |
|---|
| Moderazione | 20/06/2024 19:31 (1 day later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 269279 [SourceCodester Food Ordering Management System fino a 1.0 view-ticket-admin.php id iniezione SQL] |
|---|
| Punti | 20 |
|---|