| タイトル | Best courier management system project in php parcel_list.php V1.0 SQL Injection |
|---|
| 説明 | The 27th line of the parcel_list.php file uses the PHP method to retrieve user input from the GET element. Then, the value of this element is passed to the code without proper cleaning or validation, and ultimately used for database queries. This may lead to SQL injection attacks
baiyunjian has discovered that due to insufficient protection of the "id" parameter in the "parcel_list.php" file, "Best courier management system project in php" there is a serious security vulnerability in the This vulnerability may be used to inject malicious SQL queries, resulting in unauthorized access and extraction of sensitive information from the database. |
|---|
| ソース | ⚠️ https://github.com/Hefei-Coffee/cve/issues/8 |
|---|
| ユーザー | baiyunjian (UID 82187) |
|---|
| 送信 | 2025年03月04日 11:08 (2 年 ago) |
|---|
| モデレーション | 2025年03月06日 15:25 (2 days later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 240882 [SourceCodester Best Courier Management System 1.0 GET Parameter parcel_list.php id/s SQLインジェクション] |
|---|
| ポイント | 0 |
|---|