| 제목 | SourceCodester Best House Rental Management System 1.0 SQL Injection |
|---|
| 설명 | At "/index.php?page=view_payment&id=abc", the GET parameter id is untrusted data and goes directly into an SQL query without any sanitization or validation, this allows any authenticated user can do an SQL injection, which could damage the entire database. |
|---|
| 원천 | ⚠️ https://drive.google.com/file/d/1UeP0zPOIJ3KgfWMh5IrnkDLeJjrIP4eG/view?usp=sharing |
|---|
| 사용자 | dwgth4i (UID 74608) |
|---|
| 제출 | 2024. 09. 09. PM 12:57 (2 연령 ago) |
|---|
| 모더레이션 | 2024. 09. 09. PM 04:53 (4 hours later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 265073 [SourceCodester Best House Rental Management System 1.0 view_payment.php 아이디 SQL 주입] |
|---|
| 포인트들 | 0 |
|---|