| Titolo | code-projects Hospital Management System 1.0 SQL Injection |
|---|
| Descrizione | In the hostpital/hms/admin/index.php file of Hospital Management System, the username and password parameter is obtained, and the SQL statement is concatenated to the SQL statement without filtering the execution, resulting in SQL injection vulnerabilities and login as administrator |
|---|
| Fonte | ⚠️ https://github.com/Rocky-Bull/myCVE/blob/main/Hospital_Management_System_SQLi.md |
|---|
| Utente | Hexer. (UID 79448) |
|---|
| Sottomissione | 26/12/2024 07:02 (2 anni fa) |
|---|
| Moderazione | 26/12/2024 09:01 (2 hours later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 289334 [code-projects Hospital Management System 1.0 Login /admin/index.php username/password iniezione SQL] |
|---|
| Punti | 17 |
|---|