| Titolo | code-projects OnlineReviewerSystem 1.0 SQL Injection |
|---|
| Descrizione | During the security assessment of "Online Reviewer System", a critical SQL injection vulnerability was detected in the "login/index.php" file. This vulnerability is attributed to the insufficient validation of user input for the "username" and "password" parameters. This inadequacy enables attackers to inject malicious SQL queries. |
|---|
| Fonte | ⚠️ https://github.com/liaoliao-hla/cve/issues/2 |
|---|
| Utente | huat (UID 92445) |
|---|
| Sottomissione | 04/02/2026 07:38 (7 mesi fa) |
|---|
| Moderazione | 07/02/2026 10:13 (3 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 344868 [code-projects Online Reviewer System 1.0 Login /login/index.php username/password iniezione SQL] |
|---|
| Punti | 19 |
|---|