| タイトル | PHPGurukul Company Visitor Management System PHP V2.0 SQL injection (CWE-89) |
|---|
| 説明 | During the security review of "Company Visitor Management System PHP V2.0", I discovered a critical SQL injection vulnerability in the "/forgot-password.php" file. This vulnerability stems from insufficient user input validation of the 'email' and 'contactno' parameters in the password recovery flow. The vulnerable code takes user-supplied email and contact number directly from POST parameters and concatenates them into a SQL SELECT query without any sanitization. An unauthenticated remote attacker can inject malicious SQL code to bypass the verification check, enumerate valid admin accounts, and proceed to reset any admin's password via the resetpassword.php endpoint. Immediate remedial measures are needed. |
|---|
| ソース | ⚠️ https://github.com/mzxqqwq/CVE/issues/2 |
|---|
| ユーザー | mzxqqwq (UID 99169) |
|---|
| 送信 | 2026年06月21日 10:59 (4 月 ago) |
|---|
| モデレーション | 2026年08月06日 22:16 (2 months later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 310330 [PHPGurukul Company Visitor Management System 1.0 /forgot-password.php email SQLインジェクション] |
|---|
| ポイント | 0 |
|---|