| タイトル | SourceCodester Food Ordering Management System 1.0 SQL Injection |
|---|
| 説明 | SQL Injection vulnerability was discovered from Sourcecodester Food Ordering Management System 1.0.
add-users.php has a vulnerable parameter 'contact', which allows time-based blind sql injection. Either through crafted payload or premade tool such as sqlmap, this vulnerability can be recreated easily. This SQL injection leads to completely data breach for all the database on the system. |
|---|
| ソース | ⚠️ https://github.com/jadu101/CVE/blob/main/SourceCodester_Food_Ordering_Management_System_add_users_Sqli.md |
|---|
| ユーザー | jadu101 (UID 70632) |
|---|
| 送信 | 2024年06月19日 09:26 (2 年 ago) |
|---|
| モデレーション | 2024年06月20日 19:31 (1 day later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 269280 [SourceCodester Food Ordering Management System 1.0 add-users.php contact SQLインジェクション] |
|---|
| ポイント | 19 |
|---|