Invia #388772: SourceCodester Sourcecodester Car Driving School Management System 1.0 SQL injectioninformazioni

TitoloSourceCodester Sourcecodester Car Driving School Management System 1.0 SQL injection
DescrizioneAfter receiving the id parameter passed in through the get method in the Master.php file, it is directly spliced into the SQL query statement for execution without any security filtering. An attacker can use this parameter to perform SQL injection to read arbitrary database information.
Fonte⚠️ https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-6.md
Utente
 BFS-Lab (UID 73306)
Sottomissione10/08/2024 06:26 (2 anni fa)
Moderazione10/08/2024 10:19 (4 hours later)
StatoAccettato
Voce VulDB274126 [SourceCodester Car Driving School Management System 1.0 Master.php delete_package ID iniezione SQL]
Punti17

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!