提出 #309123: https://www.sourcecodester.com/ php task management system 1.0 SQL Injection情報

タイトルhttps://www.sourcecodester.com/ php task management system 1.0 SQL Injection
説明A vulnerability classified as critical has been discovered in the php task management system. This affects the file task-details.php. Operations on parameter task_id result in sql injection. The main reason is that the program does not judge and process the legitimacy of the user input data, resulting in an attacker can add additional SQL statements to the predefined SQL statements in the Web application, and achieve illegal operations without the knowledge of the administrator, so as to deceive the database server to perform unauthorized arbitrary queries. Thus further access to data information.
ソース⚠️ https://github.com/thisissuperann/Vul/blob/main/php%20task%20management%20system1.0-sql2
ユーザー
 liuann (UID 67227)
送信2024年04月02日 23:51 (3 年 ago)
モデレーション2024年04月03日 07:09 (7 hours later)
ステータス重複
VulDBエントリ259069 [SourceCodester PHP Task Management System 1.0 task-details.php task_id SQLインジェクション]
ポイント0

Do you know our Splunk app?

Download it now for free!