| タイトル | Electronic Medical Records System-register.php-Sqlinjection |
|---|
| 説明 | Electronic Medical Records System-register.php-Sqlinjection
There is a receiving pconsultation parameter in the Register file, and it is directly entered into the UPDATE statement without any filtering. Therefore, it can be used by attackers to steal sensitive data.
Detailed instructions：https://github.com/Hanfu-l/Cve-vulnerability-mining/blob/main/Electronic%20Medical%20Records%20System/Electronic%20Medical%20Records%20System-register.php-Sqlinjection.pdf |
|---|
| ソース | ⚠️ https://github.com/Hanfu-l/Cve-vulnerability-mining/blob/main/Electronic%20Medical%20Records%20System/Electronic%20Medical%20Records%20System-register.php-Sqlinjection.pdf |
|---|
| ユーザー | Hanfu (UID 30648) |
|---|
| 送信 | 2022年08月06日 12:23 (4 年 ago) |
|---|
| モデレーション | 2022年08月06日 18:55 (7 hours later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 205816 [SourceCodester Electronic Medical Records System UPDATE Statement register.php pconsultation SQLインジェクション] |
|---|
| ポイント | 20 |
|---|