| タイトル | SourceCodester Online Hotel Reservation System 1.0 SQL Injection |
|---|
| 説明 | During a security assessment of the *Online Hotel Reservation System In PHP With Source Code*, a critical SQL injection vulnerability was identified in the updateabout.php file. The flaw arises from insufficient validation of the address parameter, which is directly embedded into SQL queries. Exploitation of this flaw allows unauthenticated attackers to inject arbitrary SQL statements, gain access to sensitive data, escalate privileges, and potentially gain control of the application environment. Immediate remediation is strongly advised to mitigate the risk of exploitation. |
|---|
| ソース | ⚠️ https://github.com/YoSheep/cve/blob/main/Online%20Hotel%20Reservation%20System%20In%20PHP%20With%20Source%20Code%20-%20SQL%20Injection%20in%20updateabout.php.md |
|---|
| ユーザー | YoSheep (UID 88465) |
|---|
| 送信 | 2025年08月25日 08:44 (1 年 ago) |
|---|
| モデレーション | 2025年09月01日 12:08 (7 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 322105 [SourceCodester Hotel Reservation System 1.0 /admin/updateabout.php address SQLインジェクション] |
|---|
| ポイント | 20 |
|---|