| Titolo | SourceCodester Food Ordering Management System 1.0 SQL Injection |
|---|
| Descrizione | SQL Injection vulnerability was discovered from Sourcecodester Food Ordering Management System 1.0.
add-users.php has a vulnerable parameter 'contact', which allows time-based blind sql injection. Either through crafted payload or premade tool such as sqlmap, this vulnerability can be recreated easily. This SQL injection leads to completely data breach for all the database on the system. |
|---|
| Fonte | ⚠️ https://github.com/jadu101/CVE/blob/main/SourceCodester_Food_Ordering_Management_System_add_users_Sqli.md |
|---|
| Utente | jadu101 (UID 70632) |
|---|
| Sottomissione | 19/06/2024 09:26 (2 anni fa) |
|---|
| Moderazione | 20/06/2024 19:31 (1 day later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 269280 [SourceCodester Food Ordering Management System 1.0 add-users.php contact iniezione SQL] |
|---|
| Punti | 19 |
|---|