| タイトル | SOURCECODESTER DOCTOR'S APPOINTMENT SYSTEM login SQL injection |
|---|
| 説明 | A vulnerability classified as severe has been discovered in the SOURCECODESTER DOCTOR'S APPOINTMENT SYSTEM. The vulnerability arises in the login program section of the file login.php. The operation of parameters useremail and userpassword leads to SQL injection, and the limit of SQL queries can be controlled to cause any user to log in to the system, including administrator users. This will pose a serious threat to system security and sensitive data within the system. Even disrupting the normal use of the system! |
|---|
| ソース | ⚠️ https://github.com/vsdwef/edoc-doctor-appointment-system/blob/master/export.md |
|---|
| ユーザー | James_Quite (UID 44494) |
|---|
| 送信 | 2023年04月07日 06:54 (4 年 ago) |
|---|
| モデレーション | 2023年04月07日 09:08 (2 hours later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 221822 [SourceCodester Doctors Appointment System 1.0 login.php edoc usermail SQLインジェクション] |
|---|
| ポイント | 0 |
|---|