| Titolo | phpgurukul.com Curfew e-Pass Management System 1.0 sql |
|---|
| Descrizione | A SQL injection vulnerability was discovered in the "/admin/search-pass.php" file of the "Curfew Electronic Pass Management System" project. The cause of this issue was that the attacker injected malicious code from the "searchdata" POST parameter and directly used it in the SQL query without any necessary cleaning or validation. This allowed the attacker to forge input values, thereby modifying the SQL query and performing unauthorized operations. |
|---|
| Fonte | ⚠️ https://github.com/cowhrk/CVE/issues/1 |
|---|
| Utente | chenfei13124 (UID 98107) |
|---|
| Sottomissione | 13/05/2026 09:24 (5 mesi fa) |
|---|
| Moderazione | 31/05/2026 20:16 (18 days later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 299880 [PHPGurukul Curfew e-Pass Management System 1.0 /admin/search-pass.php searchdata iniezione SQL] |
|---|
| Punti | 0 |
|---|