| 제목 | SourceCodester Sourcecodester Car Driving School Management System 1.0 SQL injection |
|---|
| 설명 | After receiving the id parameter passed in through the get method in the view_package.php file, it is directly spliced into the SQL query statement for execution without any security filtering. An attacker can use this parameter to perform SQL injection to read arbitrary database information. |
|---|
| 원천 | ⚠️ https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-4.md |
|---|
| 사용자 | BFS-Lab (UID 73306) |
|---|
| 제출 | 2024. 08. 10. AM 06:25 (2 연령 ago) |
|---|
| 모더레이션 | 2024. 08. 10. AM 10:19 (4 hours later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 274124 [SourceCodester Car Driving School Management System 1.0 view_package.php 아이디 SQL 주입] |
|---|
| 포인트들 | 18 |
|---|