| 제목 | SMSot SMSot <=2.12 SQL Injection |
|---|
| 설명 | The 'get.php' file in the SMSot software version 2.12 and below, hosted on fours.smsot.com, is susceptible to SQL Injection attacks. This vulnerability exists due to the direct concatenation of the 'cid' parameter into the SQL query. An attacker can exploit this flaw by manipulating the 'cid' parameter in the HTTP GET request, potentially gaining unauthorized access to sensitive information from the database. |
|---|
| 원천 | ⚠️ https://note.zhaoj.in/share/vo1KOw3EYmBK |
|---|
| 사용자 | glzjin (UID 59815) |
|---|
| 제출 | 2024. 01. 18. AM 10:40 (3 연령 ago) |
|---|
| 모더레이션 | 2024. 01. 19. PM 12:25 (1 day later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 251557 [Smsot 까지 2.12 /get.php tid SQL 주입] |
|---|
| 포인트들 | 19 |
|---|