| 제목 | Sourcecodester Best Courier Management System 1.0 SQL Injection |
|---|
| 설명 | The SQL injection vulnerability in the 'edit_branch.php' script of the SourceCodester Courier Management System allows attackers to manipulate the SQL query by injecting malicious SQL code through the id parameter. By crafting a specially-crafted payload such as "UNION+SELECT+1,2,version(),4,5,6,7,8,9" an attacker can gain unauthorized access to sensitive information or modify database records. This could lead to data leakage, integrity compromise, and potential loss of confidential information, posing a significant security risk to the application and its users. |
|---|
| 원천 | ⚠️ https://github.com/vanitashtml/CVE-Dumps/blob/main/Sql%20Injection%20-%20Best%20Courier%20Management%20System.md |
|---|
| 사용자 | rjavenido22 (UID 64261) |
|---|
| 제출 | 2024. 02. 29. AM 09:46 (3 연령 ago) |
|---|
| 모더레이션 | 2024. 03. 01. AM 08:33 (23 hours later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 242862 [SourceCodester Best Courier Management System 1.0 /edit_branch.php 아이디 SQL 주입] |
|---|
| 포인트들 | 0 |
|---|