| タイトル | code-projects POS(point of sales) and Inventory System 1.0 SQL Injection |
|---|
| 説明 | A malicious attacker can exploit this vulnerability by manipulating the username parameter. By injecting malicious SQL code into the parameter, the attacker could gain unauthorized access to sensitive information stored in the server's database. This could lead to the exposure of confidential data, including but not limited to user credentials, personal information, and other critical data. |
|---|
| ソース | ⚠️ https://gist.github.com/Masamuneee/645d20dd1dc6389dd47a7fae0bb2cefa |
|---|
| ユーザー | masamune (UID 79684) |
|---|
| 送信 | 2025年01月02日 11:33 (2 年 ago) |
|---|
| モデレーション | 2025年01月03日 11:46 (1 day later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 290138 [code-projects Point of Sales and Inventory Management System 1.0 /user/update_account.php username SQLインジェクション] |
|---|
| ポイント | 19 |
|---|