| Titolo | itsourcecode Alton Management System 1.0 SQLi team_save.php |
|---|
| Descrizione | After logging in as a backend user, request the "/admin/team_save.php" page and pass in the "team" parameter. Due to the lax filtering of the "team" parameter on this page, SQL injection vulnerabilities were created. |
|---|
| Fonte | ⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE8-6.md |
|---|
| Utente | Dee.Mirage (UID 71702) |
|---|
| Sottomissione | 27/07/2024 12:35 (2 anni fa) |
|---|
| Moderazione | 30/07/2024 15:29 (3 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 273147 [itsourcecode Alton Management System 1.0 /admin/team_save.php team iniezione SQL] |
|---|
| Punti | 17 |
|---|