| タイトル | code-projects Responsive Hotel Site v1.0 SQL Injection |
|---|
| 説明 | Due to the lack of purification or parameterization of PID parameters, attackers can inject malicious SQL code to manipulate database queries. By utilizing the SQL injection technique of UNION query, attackers can use functions such as UNION to directly query the fields required by the database. This can be used to confirm the existence of vulnerabilities and potentially extract sensitive information from the database. |
|---|
| ソース | ⚠️ https://github.com/Huandtx/cve/blob/main/cve/Responsive%20Hotel%20Site/sql1.md |
|---|
| ユーザー | huandtx (UID 79079) |
|---|
| 送信 | 2025年01月04日 08:48 (2 年 ago) |
|---|
| モデレーション | 2025年01月04日 20:47 (12 hours later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 290226 [code-projects Responsive Hotel Site 1.0 /admin/print.php pid SQLインジェクション] |
|---|
| ポイント | 19 |
|---|